{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,6]],"date-time":"2026-06-06T19:25:47Z","timestamp":1780773947902,"version":"3.54.1"},"reference-count":41,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"6","license":[{"start":{"date-parts":[[2019,12,1]],"date-time":"2019-12-01T00:00:00Z","timestamp":1575158400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2019,12,1]],"date-time":"2019-12-01T00:00:00Z","timestamp":1575158400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2019,12,1]],"date-time":"2019-12-01T00:00:00Z","timestamp":1575158400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100012166","name":"National Basic Research Program of China","doi-asserted-by":"publisher","award":["2018YFB0803501"],"award-info":[{"award-number":["2018YFB0803501"]}],"id":[{"id":"10.13039\/501100012166","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61833015"],"award-info":[{"award-number":["61833015"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Internet Things J."],"published-print":{"date-parts":[[2019,12]]},"DOI":"10.1109\/jiot.2019.2931349","type":"journal-article","created":{"date-parts":[[2019,7,26]],"date-time":"2019-07-26T20:07:17Z","timestamp":1564171637000},"page":"9783-9793","source":"Crossref","is-referenced-by-count":45,"title":["Stealthy Attack Against Redundant Controller Architecture of Industrial Cyber-Physical System"],"prefix":"10.1109","volume":"6","author":[{"given":"Rongkuan","family":"Ma","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4221-2162","authenticated-orcid":false,"given":"Peng","family":"Cheng","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0950-1525","authenticated-orcid":false,"given":"Zhenyong","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Wenwen","family":"Liu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Qingxian","family":"Wang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7207-6691","authenticated-orcid":false,"given":"Qiang","family":"Wei","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23166"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23229"},{"key":"ref33","doi-asserted-by":"crossref","first-page":"439","DOI":"10.1145\/2382196.2382244","article-title":"Specification-based payload generation for programmable logic controllers","author":"mclaughlin","year":"2012","journal-title":"Proc ACM Conf Comput Commun Security"},{"key":"ref32","first-page":"1","article-title":"On dynamic malware payloads aimed at programmable logic controllers","author":"mclaughlin","year":"2011","journal-title":"Proc HotSec"},{"key":"ref31","author":"almgren","year":"2011","journal-title":"Report on Automated Vulnerability Discovery Techniques"},{"key":"ref30","year":"2011","journal-title":"A Time Bomb with Fourteen Bytes"},{"key":"ref37","first-page":"540","article-title":"Study on signature verification process for the firmware of an android platform","author":"jeong","year":"2018","journal-title":"Proc Int Conf Innov Mobile Internet Services Ubiquitous Comput"},{"key":"ref36","first-page":"1","article-title":"When firmware modifications attack: A case study of embedded exploitation","author":"cui","year":"2013","journal-title":"Proc Network and Distributed System Security Symp (NDSS)"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2017.2707465"},{"key":"ref34","first-page":"1","article-title":"PLC-blaster: A worm living solely in the PLC","author":"spenneberg","year":"2016","journal-title":"Black Hat Asia"},{"key":"ref10","first-page":"1","article-title":"Triton: The first ICS cyber attack on safety instrument systems","author":"di pinto","year":"2018","journal-title":"Proc Black Hat USA"},{"key":"ref40","first-page":"95","article-title":"A large-scale analysis of the security of embedded firmwares","author":"costin","year":"2014","journal-title":"Proc Usenix Security Symp"},{"key":"ref11","article-title":"The industrial control system cyber kill chain","author":"assante","year":"2016"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/ICCPS.2018.00046"},{"key":"ref13","year":"2017","journal-title":"Types of Redundancy"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.1997.601338"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/TCST.2015.2462741"},{"key":"ref16","first-page":"1","article-title":"Stealth low-level manipulation of programmable logic controllers I\/O by pin control exploitation","author":"abbasi","year":"2016","journal-title":"Proc 2nd Int Conf Critical Inf Infrastruct Security"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijcip.2014.01.004"},{"key":"ref18","doi-asserted-by":"crossref","first-page":"106","DOI":"10.1109\/MSP.2012.2185911","article-title":"Coordinated data-injection attack and detection in the smart grid: A detailed look at enriching detection solutions","volume":"29","author":"cui","year":"2012","journal-title":"IEEE Signal Process Mag"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/TCNS.2014.2357531"},{"key":"ref28","first-page":"1","article-title":"Who&#x2019;s in control of your control system? Device fingerprinting for cyber-physical systems","author":"formby","year":"2016","journal-title":"Proc Network and Distributed System Security Symp (NDSS)"},{"key":"ref4","article-title":"Security attacks on industrial control systems","year":"2015"},{"key":"ref27","year":"2018","journal-title":"Uwntek"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2011.67"},{"key":"ref6","volume":"27","author":"bencs\u00e1th","year":"2015","journal-title":"DUQU 2 0 A Comparison to DUQU"},{"key":"ref29","first-page":"723","article-title":"Exploiting siemens simatic S7 PLCs","volume":"16","author":"beresford","year":"2011","journal-title":"Proc Black Hat USA"},{"key":"ref5","author":"stouffer","year":"2015","journal-title":"Initial Public DRAFT Guide to Industrial Control Systems (ICS) Security Supervisory Control and Data Acquisition (SCADA) Systems Distributed Control Systems (DCS) and Other Control System Configurations Such as Programmable Logic Controllers (PLC) Revision 2"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.14236\/ewic\/ICS2016.7"},{"key":"ref7","article-title":"The impact of dragonfly malware on industrial control systems","author":"nelson","year":"2016"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/JPROC.2015.2512235"},{"key":"ref9","author":"cherepanov","year":"2017","journal-title":"WIN32\/INDUSTROYER A new threat for industrial control systems"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2017.2683200"},{"key":"ref20","first-page":"22","article-title":"Internet-facing PLCs&#x2014;A new back orifice","author":"klick","year":"2015","journal-title":"Proc BlackHat USA"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23313"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijcip.2013.04.004"},{"key":"ref24","year":"2018","journal-title":"Home&#x2014;Codesys"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1145\/3134600.3134618"},{"key":"ref23","year":"2018","journal-title":"Hollysys"},{"key":"ref26","year":"2019","journal-title":"Wireshark"},{"key":"ref25","year":"2018","journal-title":"3S Codesys Vulnerabilities"}],"container-title":["IEEE Internet of Things Journal"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6488907\/8931267\/08777097.pdf?arnumber=8777097","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,9,18]],"date-time":"2023-09-18T16:14:12Z","timestamp":1695053652000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/8777097\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,12]]},"references-count":41,"journal-issue":{"issue":"6"},"URL":"https:\/\/doi.org\/10.1109\/jiot.2019.2931349","relation":{},"ISSN":["2327-4662","2372-2541"],"issn-type":[{"value":"2327-4662","type":"electronic"},{"value":"2372-2541","type":"electronic"}],"subject":[],"published":{"date-parts":[[2019,12]]}}}