{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,10]],"date-time":"2026-05-10T06:05:26Z","timestamp":1778393126937,"version":"3.51.4"},"reference-count":70,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"10","license":[{"start":{"date-parts":[[2023,5,15]],"date-time":"2023-05-15T00:00:00Z","timestamp":1684108800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2023,5,15]],"date-time":"2023-05-15T00:00:00Z","timestamp":1684108800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2023,5,15]],"date-time":"2023-05-15T00:00:00Z","timestamp":1684108800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61833015"],"award-info":[{"award-number":["61833015"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Program for Innovation Leading Scientists and Technicians of Zhongyuan","award":["224200510002"],"award-info":[{"award-number":["224200510002"]}]},{"name":"Major Science and Technology Infrastructure Project of Zhijiang Laboratory"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Internet Things J."],"published-print":{"date-parts":[[2023,5,15]]},"DOI":"10.1109\/jiot.2022.3200127","type":"journal-article","created":{"date-parts":[[2022,8,22]],"date-time":"2022-08-22T19:58:46Z","timestamp":1661198326000},"page":"8331-8347","source":"Crossref","is-referenced-by-count":20,"title":["Defending Cyber\u2013Physical Systems Through Reverse-Engineering-Based Memory Sanity Check"],"prefix":"10.1109","volume":"10","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-7639-3686","authenticated-orcid":false,"given":"Yangyang","family":"Geng","sequence":"first","affiliation":[{"name":"State Key Laboratory of Mathematics and Advanced Computing, Zhengzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yuqi","family":"Chen","sequence":"additional","affiliation":[{"name":"School of Information Science and Technology, ShanghaiTech University, Shanghai, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Rongkuan","family":"Ma","sequence":"additional","affiliation":[{"name":"State Key Laboratory of Mathematics and Advanced Computing, Zhengzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4891-8657","authenticated-orcid":false,"given":"Qiang","family":"Wei","sequence":"additional","affiliation":[{"name":"State Key Laboratory of Mathematics and Advanced Computing, Zhengzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jie","family":"Pan","sequence":"additional","affiliation":[{"name":"State Key Laboratory of Industrial Control Technology, Zhejiang University, Hangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7113-7635","authenticated-orcid":false,"given":"Jingyi","family":"Wang","sequence":"additional","affiliation":[{"name":"State Key Laboratory of Industrial Control Technology, Zhejiang University, Hangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Peng","family":"Cheng","sequence":"additional","affiliation":[{"name":"State Key Laboratory of Industrial Control Technology, Zhejiang University, Hangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Qingxian","family":"Wang","sequence":"additional","affiliation":[{"name":"School of Cyber Science and Engineering, Zhengzhou University, Zhengzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-22312-0_3"},{"key":"ref57","author":"langner","year":"2011","journal-title":"A Time Bomb with Fourteen Bytes"},{"key":"ref12","first-page":"1","article-title":"Out of control: Ransomware for industrial control systems","author":"formby","year":"2017","journal-title":"Proc RSA Conf"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijcip.2017.10.001"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2017.06.012"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijcip.2021.100470"},{"key":"ref14","first-page":"165","article-title":"PAtt: Physics-based attestation of control systems","author":"ghaeini","year":"2019","journal-title":"Proc Int Symp Res Attacks Intrusions Defenses (RAID)"},{"key":"ref58","first-page":"1","article-title":"Rogue7: Rogue engineering-station attacks on S7 simatic PLCs","author":"biham","year":"2019","journal-title":"Proc Black Hat USA"},{"key":"ref53","year":"2020","journal-title":"CVE-2020-7568"},{"key":"ref52","year":"2020","journal-title":"CVE-2020-7565"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.14722\/bar.2019.23074"},{"key":"ref55","first-page":"1","article-title":"Exploiting siemens simatic S7 PLCs","author":"beresford","year":"2011","journal-title":"Proc Black Hat USA"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijcip.2013.04.004"},{"key":"ref54","year":"2020","journal-title":"CVE-2020-28214"},{"key":"ref17","first-page":"109","article-title":"Overshadow plc to detect remote control-logic injection attacks","author":"yoo","year":"2019","journal-title":"Detection of Intrusions and Malware and Vulnerability Assessment"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-30215-3_20"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/3468264.3468617"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1016\/j.fsidi.2020.301013"},{"key":"ref51","year":"2019","journal-title":"CVE-2019-6855"},{"key":"ref50","year":"2020","journal-title":"CVE-2020-6988"},{"key":"ref46","article-title":"Innovative technology for CPU based attestation and sealing","author":"anati","year":"2013"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/ICCPS48487.2020.00011"},{"key":"ref48","year":"2021","journal-title":"Supplementary Material"},{"key":"ref47","author":"francis","year":"2021","journal-title":"Top 20 programmable logic controller manufacturers"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijcip.2021.100452"},{"key":"ref41","first-page":"1","article-title":"Mechanisms to provide integrity in SCADA and PCS devices","author":"shah","year":"2008","journal-title":"Proc Int Workshop Cyber-Phys Syst Challenges Appl (CPS-CA)"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978358"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1007\/s10207-011-0124-7"},{"key":"ref49","year":"2020","journal-title":"CVE-2020-6984"},{"key":"ref8","first-page":"110","article-title":"On ladder logic bombs in industrial control systems","author":"govil","year":"2017","journal-title":"Computer Security"},{"key":"ref7","first-page":"1","article-title":"Internet-facing PLCs—A new back orifice","author":"klick","year":"2015","journal-title":"Proc Black Hat USA"},{"key":"ref9","first-page":"1","article-title":"Leveraging Ethernet card vulnerabilities in field devices","author":"peck","year":"2009","journal-title":"Proc SCADA Security Sci Symp"},{"key":"ref4","doi-asserted-by":"crossref","first-page":"49","DOI":"10.1109\/MSP.2011.67","article-title":"Stuxnet: Dissecting a cyberwarfare weapon","volume":"9","author":"langner","year":"2011","journal-title":"IEEE Security Privacy"},{"key":"ref3","author":"russon","year":"2021","journal-title":"Us fuel pipeline hackers ‘didn't mean to create problems'"},{"key":"ref6","first-page":"1","article-title":"PLC-blaster: A worm living solely in the PLC","author":"spenneberg","year":"2016","journal-title":"Proc Black Hat Asia"},{"key":"ref5","first-page":"1","article-title":"Industroyer\/crashoverride: Zero things cool about a threat group targeting the power grid","author":"lee","year":"2017","journal-title":"Proc Black Hat USA"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2020.3040237"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/DCOSS.2014.61"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/COMPSAC.2017.188"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/SCSPW.2016.7509557"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1016\/j.jprocont.2018.05.005"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/2897845.2897855"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2018.2875008"},{"key":"ref33","first-page":"333","article-title":"PLC-sleuth: Detecting and localizing PLC intrusions using control invariants","author":"yang","year":"2020","journal-title":"Proc Int Symp Res Attacks Intrusions Defenses (RAID)"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23265"},{"key":"ref2","first-page":"1","article-title":"TRITON: The first ICS cyber attack on safety instrument systems","author":"pinto","year":"2018","journal-title":"Proc Black Hat USA"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00034"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/3052973.3053011"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/TCNS.2014.2357531"},{"key":"ref70","author":"ornaghi","year":"2021","journal-title":"Ettercap"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom\/BigDataSE.2019.00030"},{"key":"ref68","year":"2020","journal-title":"SSA-381684 Improper Password Protection during Authentication in SIMATIC S7-300 and S7-400 CPUs and Derived Products"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/3264888.3264890"},{"key":"ref67","year":"2018","journal-title":"Security notification—Modicon M221 (V1 1)"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00016"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/ICDMW.2017.149"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.2165\/00822942-200403040-00007"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/ICMLA.2019.00212"},{"key":"ref64","author":"bryan","year":"1997","journal-title":"Programmable Controllers Theory and Implementation"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2017.06.005"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/3264888.3264896"},{"key":"ref66","year":"2011","journal-title":"Siemens SIMATIC controllers password protection vulnerability"},{"key":"ref21","first-page":"3","article-title":"Anomaly detection for industrial control systems using sequence-to-sequence neural networks","author":"kim","year":"2019","journal-title":"Computer Security"},{"key":"ref65","year":"2012","journal-title":"CVE-2012-6440"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1186\/s42400-021-00069-7"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-48989-6_10"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243752"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1109\/WCICSS.2016.7882935"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1002\/cpe.5724"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23043"}],"container-title":["IEEE Internet of Things Journal"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6488907\/10119650\/09864200.pdf?arnumber=9864200","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,5,29]],"date-time":"2023-05-29T17:42:02Z","timestamp":1685382122000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9864200\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,5,15]]},"references-count":70,"journal-issue":{"issue":"10"},"URL":"https:\/\/doi.org\/10.1109\/jiot.2022.3200127","relation":{},"ISSN":["2327-4662","2372-2541"],"issn-type":[{"value":"2327-4662","type":"electronic"},{"value":"2372-2541","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,5,15]]}}}