{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,2]],"date-time":"2026-10-02T10:26:29Z","timestamp":1790936789710,"version":"4.1.0"},"reference-count":30,"publisher":"IEEE","license":[{"start":{"date-parts":[[2020,6,1]],"date-time":"2020-06-01T00:00:00Z","timestamp":1590969600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2020,6,1]],"date-time":"2020-06-01T00:00:00Z","timestamp":1590969600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2020,6,1]],"date-time":"2020-06-01T00:00:00Z","timestamp":1590969600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2020,6]]},"DOI":"10.1109\/cns48642.2020.9162232","type":"proceedings-article","created":{"date-parts":[[2020,8,7]],"date-time":"2020-08-07T21:54:40Z","timestamp":1596837280000},"page":"1-9","source":"Crossref","is-referenced-by-count":5,"title":["Forensic Investigation of Industrial Control Systems Using Deterministic Replay"],"prefix":"10.1109","author":[{"given":"Gregory","family":"Walkup","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Sriharsha","family":"Etigowni","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Dongyan","family":"Xu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Vincent","family":"Urias","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Han W.","family":"Lin","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/2714576.2714599"},{"key":"ref10","article-title":"Programmable controllers - Programming languages","author":"commission","year":"2013","journal-title":"International Electrotechnical Commission Geneva CH Standard"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2011.2166768"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978388"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/CCA.2014.6981373"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/TCST.2013.2280899"},{"key":"ref15","article-title":"Lowering the Barriers to Industrial Control System Security with GRFICS","author":"formby","year":"2018","journal-title":"2018 USENIX Workshop on Advances in Security Education (ASE 18)"},{"key":"ref16","year":"2019","journal-title":"Unity Engine"},{"key":"ref17","year":"2016","journal-title":"EtherNet\/IP™ - CIP on Ethernet Technology"},{"key":"ref18","article-title":"MODBUS MESSAGING ON TCP\/IP IMPLEMENTATION GUIDE V1.0b","year":"2006","journal-title":"Modbus Organization Inc"},{"key":"ref19","year":"2019","journal-title":"HMI Software by AdvancedHMI Application Creation Framework"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/3203245"},{"key":"ref4","article-title":"SCADA LIVE FORENSICS: REAL TIME DATA ACQUISITION PROCESS TO DETECT, PREVENT OR EVALUATE CRITICAL SITUATIONS","volume":"9","author":"pedro taveras","year":"2013","journal-title":"European Scientific Journal"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1007\/s10207-012-0163-8"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2014.06.007"},{"key":"ref6","doi-asserted-by":"crossref","first-page":"401","DOI":"10.1007\/978-3-319-11212-1_23","article-title":"SRID: State Relation Based Intrusion Detection for False Data Injection Attacks in SCADA","author":"wang","year":"2014","journal-title":"Computer Security - ESORICS 2014"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/3167132.3167305"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.6028\/NIST.SP.800-82r2"},{"key":"ref8","doi-asserted-by":"crossref","first-page":"355","DOI":"10.1145\/1966913.1966959","article-title":"Attacks Against Process Control Systems: Risk Assessment, Detection, and Response","author":"carden\u00e1s","year":"2011","journal-title":"Proceedings of the 6th ACM Symposium on Information Computer and Communications Security ser ASIACCS ’11"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/2664243.2664277"},{"key":"ref2","article-title":"CRASHOVERRIDE: Analyzing the Threat to Electric Grid Operations","year":"2017","journal-title":"Dragos inc Tech Rep"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/2994487.2994496"},{"key":"ref1","article-title":"W32.Stuxnet Dossier","author":"falliere","year":"2011","journal-title":"Symantec Corporation Tech Rep"},{"key":"ref20","article-title":"PyShark","year":"0","journal-title":"Dor Green (kiminewt)"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/2732198.2732200"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/3264888.3264898"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijcip.2013.08.003"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2018.00025"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/3140241.3140250"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2014.81"}],"event":{"name":"2020 IEEE Conference on Communications and Network Security (CNS)","location":"Avignon, France","start":{"date-parts":[[2020,6,29]]},"end":{"date-parts":[[2020,7,1]]}},"container-title":["2020 IEEE Conference on Communications and Network Security (CNS)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/9153729\/9162157\/09162232.pdf?arnumber=9162232","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,6,27]],"date-time":"2022-06-27T15:57:31Z","timestamp":1656345451000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9162232\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,6]]},"references-count":30,"URL":"https:\/\/doi.org\/10.1109\/cns48642.2020.9162232","relation":{},"subject":[],"published":{"date-parts":[[2020,6]]}}}