{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,24]],"date-time":"2026-06-24T06:05:32Z","timestamp":1782281132025,"version":"3.54.5"},"reference-count":61,"publisher":"IEEE","license":[{"start":{"date-parts":[[2026,5,11]],"date-time":"2026-05-11T00:00:00Z","timestamp":1778457600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,5,11]],"date-time":"2026-05-11T00:00:00Z","timestamp":1778457600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,5,11]]},"DOI":"10.1109\/iccps68698.2026.00021","type":"proceedings-article","created":{"date-parts":[[2026,6,23]],"date-time":"2026-06-23T19:43:46Z","timestamp":1782243826000},"page":"142-153","source":"Crossref","is-referenced-by-count":0,"title":["ReVISE: Disrupting Industrial Control Processes with Timing-Aware PLC Variable Manipulation"],"prefix":"10.1109","author":[{"given":"Syed Ghazanfar","family":"Abbas","sequence":"first","affiliation":[{"name":"Purdue University,West Lafayette,USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Muslum Ozgur","family":"Ozmen","sequence":"additional","affiliation":[{"name":"Arizona State University,Tempe,USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Dave Jing","family":"Tian","sequence":"additional","affiliation":[{"name":"Purdue University,West Lafayette,USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Z. Berkay","family":"Celik","sequence":"additional","affiliation":[{"name":"Purdue University,West Lafayette,USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ashish","family":"Kundu","sequence":"additional","affiliation":[{"name":"Cisco Research,USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Dongyan","family":"Xu","sequence":"additional","affiliation":[{"name":"Purdue University,West Lafayette,USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","article-title":"Industrial Network Security: Securing critical infrastructure networks for smart grid, SCADA, and other Industrial Control Systems","author":"Knapp","year":"2024"},{"key":"ref2","article-title":"Sain: Improving ics attack detection sensitivity via state-aware invariants","volume-title":"USENIX Security Symposium","author":"Abbas"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1016\/j.rcim.2024.102927"},{"key":"ref4","article-title":"Rockwell automation controllogix plc vulnerabilities","year":"2024"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833730"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.4135\/9781473960367.n239"},{"key":"ref7","article-title":"Dangerous stuff\u2019: hackers tried to poison water supply of florida town","author":"Robles","year":"2021","journal-title":"The New York Times"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/3471621.3471864"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/3722565.3727196"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/ASE.2019.00093"},{"key":"ref11","article-title":"A deep learning-based framework for conducting stealthy attacks in industrial control systems","author":"Feng","year":"2017","journal-title":"arXiv preprint arXiv:1709.06397"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/3462633.3483976"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-22038-9_6"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23313"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2024.23049"},{"key":"ref16","article-title":"A decade after stuxnet: How siemens s7 is still an attacker\u2019s heaven","author":"Finck"},{"key":"ref17","article-title":"Fischertechnik plant manual","author":"FischerTechnik","year":"2022"},{"key":"ref18","article-title":"Chemical plant","year":"2022"},{"key":"ref19","article-title":"Water treatment plant","year":"2020"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/3167132.3167305"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10179411"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/3372318.3372324"},{"key":"ref23","article-title":"Apt cyber tools targeting ics\/scada devices","year":"2022"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/spw53761.2021.00058"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.3390\/app11219785"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/PST.2016.7906943"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1061\/(asce)ee.1943-7870.0001686"},{"key":"ref28","doi-asserted-by":"crossref","DOI":"10.1007\/978-3-319-71368-7_1","article-title":"Stealth low-level manipulation of programmable logic controllers i\/o by pin control exploitation","volume-title":"International Conference on Critical Information Infrastructures Security","author":"Abbasi"},{"key":"ref29","article-title":"Idec plcs","year":"2022"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-98446-9_6"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/3411498.3419961"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1002\/qre.3436"},{"key":"ref33","article-title":"Siemens firmware update s7-1500 cpus","year":"2024"},{"key":"ref34","article-title":"Unipi neuron","author":"Technology","year":"2024"},{"key":"ref35","article-title":"Codesys webvisu","year":"2024"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00034"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/COMPSAC.2016.122"},{"key":"ref38","article-title":"Ics attack techniques","author":"Mitre","year":"2023"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2021.102424"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1145\/2994487.2994496"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-32125-7_11"},{"key":"ref42","article-title":"On dynamic malware payloads aimed at programmable logic controllers","volume-title":"6th USENIX Workshop on Hot Topics in Security (HotSec 11)","author":"McLaughlin"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382244"},{"key":"ref44","article-title":"Ghost in the plc: stealth on-the-fly manipulation of programmable logic controllers\u2019 i\/o","author":"Abbasi","year":"2016","journal-title":"Centre for Telematics and Information Technology (CTIT)"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/SGCF.2018.8408947"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2013.77"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.3166\/ejc.16.624-641"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.4204\/EPTCS.250.1"},{"key":"ref49","article-title":"Arch-comp23 category report: Continuous and hybrid systems with linear continuous dynamics","volume-title":"10th International Workshop on Applied Verification of Continuous and Hybrid Systems","author":"Althoff"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-45873-5_6"},{"key":"ref51","article-title":"Techniques and tools for hybrid systems reachability analysis","author":"Abraham","year":"2017","journal-title":"Rigorous Systems Engineering of Cyber Physical Systems, RISE4CPS"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-22110-1_30"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1016\/j.automatica.2008.03.027"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1145\/1967701.1967710"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1016\/j.nahs.2020.100880"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/RTAS52030.2021.00032"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/RTSS.2013.16"},{"key":"ref58","article-title":"Controlsystem stability under consecutive deadline misses constraints","volume-title":"32nd euromicro conference on real-time systems","author":"Maggio"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1109\/TCNS.2016.2573039"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1109\/TAC.2017.2676679"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.23919\/ACC50511.2021.9483092"}],"event":{"name":"2026 ACM\/IEEE 17th International Conference on Cyber-Physical Systems (ICCPS)","location":"Saint Malo, France","start":{"date-parts":[[2026,5,11]]},"end":{"date-parts":[[2026,5,14]]}},"container-title":["2026 ACM\/IEEE 17th International Conference on Cyber-Physical Systems (ICCPS)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11570664\/11570679\/11570702.pdf?arnumber=11570702","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,6,24]],"date-time":"2026-06-24T05:28:13Z","timestamp":1782278893000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11570702\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,5,11]]},"references-count":61,"URL":"https:\/\/doi.org\/10.1109\/iccps68698.2026.00021","relation":{},"subject":[],"published":{"date-parts":[[2026,5,11]]}}}