{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,2]],"date-time":"2026-01-02T07:32:51Z","timestamp":1767339171753,"version":"3.28.0"},"reference-count":29,"publisher":"IEEE","license":[{"start":{"date-parts":[[2022,6,6]],"date-time":"2022-06-06T00:00:00Z","timestamp":1654473600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2022,6,6]],"date-time":"2022-06-06T00:00:00Z","timestamp":1654473600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2022,6,6]]},"DOI":"10.1109\/isdfs55398.2022.9800831","type":"proceedings-article","created":{"date-parts":[[2022,6,22]],"date-time":"2022-06-22T19:52:11Z","timestamp":1655927531000},"page":"1-6","source":"Crossref","is-referenced-by-count":6,"title":["The Digital Forensics of Cyber-Attacks at Electrical Power Grid Substation"],"prefix":"10.1109","author":[{"given":"Juha","family":"P\u00e4rssinen","sequence":"first","affiliation":[{"name":"VTT Technical Research Centre of Finland,Espoo,Finland"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Petra","family":"Raussi","sequence":"additional","affiliation":[{"name":"VTT Technical Research Centre of Finland,Espoo,Finland"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Sami","family":"Noponen","sequence":"additional","affiliation":[{"name":"VTT Technical Research Centre of Finland,Oulu,Finland"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mikael","family":"Opas","sequence":"additional","affiliation":[{"name":"VTT Technical Research Centre of Finland,Espoo,Finland"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jarno","family":"Salonen","sequence":"additional","affiliation":[{"name":"VTT Technical Research Centre of Finland,Tampere,Finland"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.14236\/ewic\/ICS2015.5"},{"key":"ref11","article-title":"NIST Special Publication 800-86, Guide to Integrating Forensic Techniques into Incident Response","author":"kent","year":"2006","journal-title":"NIST"},{"key":"ref12","article-title":"Tools, Techniques, and Methodologies: A Survey of Digital Forensics for SCADA Systems","author":"asmar","year":"2018","journal-title":"ICSS ’18"},{"journal-title":"Industrial network security","year":"2014","author":"knapp","key":"ref13"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-73697-6_9"},{"journal-title":"ATT&CK for Industrial Control Systems","year":"0","key":"ref15"},{"journal-title":"Software Industroyer CRASHOVERRIDE","year":"0","key":"ref16"},{"year":"0","key":"ref17"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1049\/iet-cps.2017.0033"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/TSG.2017.2665461"},{"key":"ref28","article-title":"Corrupted goose detectors: Anomaly detection in power utility real-time ethernet communications","volume":"2015","author":"kabir-querrec","year":"2015","journal-title":"GreHack"},{"journal-title":"Forensic Analysis of Industrial Control Systems","year":"2015","author":"folkerth","key":"ref4"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/ICEIC51217.2021.9369743"},{"journal-title":"WIN32\/INDUSTROYER A new threat for industrial control systems","year":"0","author":"cherepanov","key":"ref3"},{"article-title":"Recommended practice: Creating cyber forensics plans for control systems. DHS Control Systems Security Program","year":"2008","author":"fabro","key":"ref6"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/SmartGridComm47815.2020.9303015"},{"key":"ref5","first-page":"623","article-title":"Overview of IEC 61850 and Benefits","author":"mackiewicz","year":"0","journal-title":"Proceedings of 2006 IEEE PES Power Systems Conference and Exposition October 29 –November 1"},{"key":"ref8","article-title":"Developing Cyber Forensics for SCADA Industrial Control Systems","author":"stirland","year":"2014","journal-title":"Proceedings of the International Conference on Information Security and Cyber Forensics"},{"article-title":"SP 800-82 Rev. 2 Guide to Industrial Control Systems (ICS) Security","year":"2015","author":"stouffer","key":"ref7"},{"key":"ref2","first-page":"2016","volume":"22","author":"shehod","year":"2016","journal-title":"Ukraine power grid cyberattack and US susceptibility Cybersecurity implications of smart grid advancements in the US"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/MC.2012.325"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1016\/B978-0-12-805321-8.00010-0"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/PESGM.2016.7741313"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/ISGT49243.2021.9372195"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2018.2884728"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/TPEC51183.2021.9384911"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/SmartGridComm.2019.8909810"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2019.2957828"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/MSCPES49613.2020.9133698"}],"event":{"name":"2022 10th International Symposium on Digital Forensics and Security (ISDFS)","start":{"date-parts":[[2022,6,6]]},"location":"Istanbul, Turkey","end":{"date-parts":[[2022,6,7]]}},"container-title":["2022 10th International Symposium on Digital Forensics and Security (ISDFS)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/9800750\/9800752\/09800831.pdf?arnumber=9800831","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,6,12]],"date-time":"2023-06-12T17:57:39Z","timestamp":1686592659000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9800831\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,6,6]]},"references-count":29,"URL":"https:\/\/doi.org\/10.1109\/isdfs55398.2022.9800831","relation":{},"subject":[],"published":{"date-parts":[[2022,6,6]]}}}