{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,4]],"date-time":"2026-03-04T16:51:37Z","timestamp":1772643097728,"version":"3.50.1"},"reference-count":67,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"12","license":[{"start":{"date-parts":[[2022,6,15]],"date-time":"2022-06-15T00:00:00Z","timestamp":1655251200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2022,6,15]],"date-time":"2022-06-15T00:00:00Z","timestamp":1655251200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2022,6,15]],"date-time":"2022-06-15T00:00:00Z","timestamp":1655251200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"Science and Technology Innovation 2030 Program","award":["2018AAA0101605"],"award-info":[{"award-number":["2018AAA0101605"]}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61833015"],"award-info":[{"award-number":["61833015"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61903328"],"award-info":[{"award-number":["61903328"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100004731","name":"Zhejiang Provincial Natural Science Foundation","doi-asserted-by":"publisher","award":["LZ22F030010"],"award-info":[{"award-number":["LZ22F030010"]}],"id":[{"id":"10.13039\/501100004731","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Institutional Grant at UC Denver"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Internet Things J."],"published-print":{"date-parts":[[2022,6,15]]},"DOI":"10.1109\/jiot.2022.3164723","type":"journal-article","created":{"date-parts":[[2022,4,4]],"date-time":"2022-04-04T20:53:21Z","timestamp":1649105601000},"page":"9934-9947","source":"Crossref","is-referenced-by-count":24,"title":["Detecting PLC Intrusions Using Control Invariants"],"prefix":"10.1109","volume":"9","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-1596-6890","authenticated-orcid":false,"given":"Zeyu","family":"Yang","sequence":"first","affiliation":[{"name":"State Key Laboratory of Industrial Control Technology, Zhejiang University, Hangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0741-8795","authenticated-orcid":false,"given":"Liang","family":"He","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Engineering, University of Colorado, Denver, CO, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Hua","family":"Yu","sequence":"additional","affiliation":[{"name":"State Key Laboratory of Industrial Control Technology, Zhejiang University, Hangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6816-6459","authenticated-orcid":false,"given":"Chengcheng","family":"Zhao","sequence":"additional","affiliation":[{"name":"State Key Laboratory of Industrial Control Technology, Zhejiang University, Hangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4221-2162","authenticated-orcid":false,"given":"Peng","family":"Cheng","sequence":"additional","affiliation":[{"name":"State Key Laboratory of Industrial Control Technology, Zhejiang University, Hangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3155-3145","authenticated-orcid":false,"given":"Jiming","family":"Chen","sequence":"additional","affiliation":[{"name":"State Key Laboratory of Industrial Control Technology, Zhejiang University, Hangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","first-page":"333","article-title":"PLC-Sleuth: Detecting and localizing PLC intrusions using control invariants","volume-title":"Proc. 23rd Int. Symp. Res. Attacks Intrusions Defenses (RAID)","author":"Yang"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2019.2943696"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.6028\/nist.sp.800-82e2008"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2019.00043"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/TSUSC.2019.2913317"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/ICC40277.2020.9148632"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2018.2826558"},{"key":"ref8","volume-title":"Shamoon: Destructive Threat Re-Emerges With New Sting in its Tail","year":"2018"},{"key":"ref9","volume-title":"Rockwell Automation MicroLogix Controllers and RSLogix 500 Software","year":"2020"},{"key":"ref10","volume-title":"SSA-381684: Improper Password Protection during Authentication in SIMATIC S7-300 and S7-400 CPUs and Derived Products","year":"2020"},{"key":"ref11","volume-title":"Security Notification\u2014Modicon M100\/M200\/M221 Programmable Logic Controller (V3.0)","year":"2021"},{"key":"ref12","first-page":"1","article-title":"Internet-facing PLCs\u2014A new back orifice","volume-title":"Proc. Blackhat USA","author":"Klick"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2017.2703172"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23271"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2019.00045"},{"key":"ref16","first-page":"2847","article-title":"ICSFuzz: Manipulating I\/Os and repurposing binary code to enable instrumented fuzzing in ICS control applications","volume-title":"Proc. 30th USENIX Security Symp. (USENIX Security)","author":"Tychalas"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-72817-9_8"},{"key":"ref18","volume-title":"After Triton, Will the Industrial Threat Landscape Ever be the Same?","year":"2018"},{"issue":"6","key":"ref19","article-title":"W32. Stuxnet dossier","volume":"5","author":"Falliere","year":"2011"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23313"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-84628-282-9_47"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1205\/026387603321158159"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1090\/qam\/78516"},{"key":"ref24","volume-title":"Advanced PID Control","author":"\u00c5str\u00f6m","year":"2006"},{"key":"ref25","volume-title":"Automating With STEP7 in STL and SCL: Programmable Controllers Simatic S7-300\/400","author":"Berger","year":"2012"},{"key":"ref26","volume-title":"Multivariable Control Systems: An Engineering Approach","author":"Albertos","year":"2006"},{"key":"ref27","volume-title":"Feedback Control of Dynamic Systems","volume":"3","author":"Franklin","year":"1994"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/ALLERTON.2009.5394956"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1093\/bioinformatics\/18.suppl_2.S231"},{"key":"ref30","volume-title":"Control System Documentation: Applying Symbols and Identification","author":"McAvinew","year":"2004"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2007.190732"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v29i1.9689"},{"key":"ref33","volume-title":"Multivariable Feedback Control: Analysis and Design","volume":"2","author":"Skogestad","year":"2007"},{"key":"ref34","volume-title":"Fisher 4320 Wireless Position Monitor","year":"2009"},{"key":"ref35","volume-title":"SIEMENS SIPART PS2 (6DR$5\\cdots$\n) Electropneumatic Positioners","year":"2017"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978388"},{"key":"ref37","volume-title":"Exporting Archived Data From WinCC With the OLE DB Provider","year":"2019"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-68899-0"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1016\/0098-1354(93)80018-I"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1007\/BF00994110"},{"key":"ref41","article-title":"Bayesian belief networks: From construction to inference","author":"Bouckaert","year":"1995"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1111\/j.1467-8640.1994.tb00166.x"},{"key":"ref43","volume-title":"WinCC: Working with WinCC","year":"2016"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1145\/3427228.3427660"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1145\/3471621.3471864"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijcip.2013.04.004"},{"key":"ref47","first-page":"1","article-title":"Ghost in the PLC designing an undetectable programmable logic controller rootkit via pin control attack","volume-title":"Proc. Black Hat Europe","author":"Abbasi"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.14722\/bar.2019.23074"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-35764-0_5"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00034"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1145\/2351676.2351741"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23043"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2014.113"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2017.4251102"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1145\/1966913.1966959"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243752"},{"key":"ref57","first-page":"895","article-title":"SAVIOR: Securing autonomous vehicles with robust physical invariants","volume-title":"Proc. 29th USENIX Security Symp. (USENIX Security)","author":"Quinonez"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2020.3040237"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-11212-1_23"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1145\/2897845.2897855"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00016"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23265"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1145\/3327961.3329530"},{"key":"ref64","first-page":"165","article-title":"PAtt: Physics-based attestation of control systems","volume-title":"Proc. 22nd Int. Symp. Res. Attacks Intrusions Defenses (RAID)","author":"Ghaeini"},{"key":"ref65","first-page":"32","article-title":"Code integrity attestation for PLCs using black box neural network predictions","volume-title":"Proc. ACM Joint Eur. Softw. Eng. Conf. Symp. Found. Softw. Eng. (ESEC\/FSE)","author":"Sun"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2019.2963791"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1109\/TSG.2021.3129195"}],"container-title":["IEEE Internet of Things Journal"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6488907\/9789736\/09749129.pdf?arnumber=9749129","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,1,18]],"date-time":"2024-01-18T00:46:34Z","timestamp":1705538794000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9749129\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,6,15]]},"references-count":67,"journal-issue":{"issue":"12"},"URL":"https:\/\/doi.org\/10.1109\/jiot.2022.3164723","relation":{},"ISSN":["2327-4662","2372-2541"],"issn-type":[{"value":"2327-4662","type":"electronic"},{"value":"2372-2541","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022,6,15]]}}}