{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,24]],"date-time":"2026-06-24T15:03:27Z","timestamp":1782313407495,"version":"3.54.5"},"reference-count":56,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2016,12]]},"DOI":"10.1109\/pst.2016.7906943","type":"proceedings-article","created":{"date-parts":[[2017,4,24]],"date-time":"2017-04-24T21:12:50Z","timestamp":1493068370000},"page":"96-103","source":"Crossref","is-referenced-by-count":87,"title":["An Internet-wide view of ICS devices"],"prefix":"10.1109","author":[{"given":"Ariana","family":"Mirian","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zane","family":"Ma","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"David","family":"Adrian","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Matthew","family":"Tischer","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Thasphon","family":"Chuenchujit","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Tim","family":"Yardley","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Robin","family":"Berthier","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Joshua","family":"Mason","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zakir","family":"Durumeric","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"J. Alex","family":"Halderman","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Michael","family":"Bailey","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/1538788.1538820"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2008.159"},{"key":"ref33","article-title":"Nmap Network Scanning: The Official Nmap Project Guide to Network Discovery and Security Scanning","author":"lyon","year":"2009","journal-title":"Insecure org USA"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/TSG.2015.2432013"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/SURV.2011.122111.00145"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/2459976.2459982"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.21236\/ADA400003"},{"key":"ref36","author":"meixell","year":"2013","journal-title":"Out of control Demonstrating SCADA exploitation"},{"key":"ref35","author":"maynor","year":"2006","journal-title":"SCADA security and terrorism We're not crying wolf"},{"key":"ref34","author":"matherly","year":"0","journal-title":"Shodan the search engine for"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/2808705.2808710"},{"key":"ref27","author":"kaur","year":"2015","journal-title":"Securing BACnet's pitfalls"},{"key":"ref29","article-title":"You've got vulnerability: Exploring effective vulnerability notifications","author":"li","year":"2016","journal-title":"USENIX Security Symposium"},{"key":"ref2","year":"0","journal-title":"Fox tunneling and HTTP tunneling"},{"key":"ref1","year":"0","journal-title":"A DNP3 protocol primer"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/1399583.1399587"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2006.03.001"},{"key":"ref21","author":"hilt","year":"0","journal-title":"s7-info NSE script"},{"key":"ref24","article-title":"International Electrotechnical Commission and others","volume":"1","year":"2003","journal-title":"IEC 61784-1 Digital data communications for measurement and control - Part 1 Profile sets for continuous and discrete manufacturing relative to fieldbus use in industrial control systems"},{"key":"ref23","article-title":"International Electrotechnical Commission and others","year":"2003","journal-title":"IEC 61158 Digital data communications for measurement and control-Fieldbus for use in industrial control systems"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/ICACT.2014.6778974"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/SmartGridComm.2011.6102320"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/PES.2007.385876"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/HICSS.2009.273"},{"key":"ref56","article-title":"A taxonomy of cyber attacks on SCADA systems","author":"zhu","year":"2011","journal-title":"International Conference of Internet of Things"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/TSG.2011.2159818"},{"key":"ref54","author":"winn","year":"2015","journal-title":"Constructing cost-effective and targetable ICS honeypots suited for production networks"},{"key":"ref53","author":"wilhoit","year":"2013","journal-title":"Who's Really Attacking Your ICS Equipment?"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/CNS.2015.7346907"},{"key":"ref10","author":"balasubramanian","year":"2014","journal-title":"Incremental design migration support in industrial control systems development"},{"key":"ref11","author":"beresford","year":"2011","journal-title":"Exploiting Siemens Simatic S7 PLCs"},{"key":"ref40","author":"provos","year":"2007","journal-title":"Virtual Honeypots From Botnet Tracking to Intrusion Detection"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/PRDC.2011.30"},{"key":"ref13","author":"bodenheim","year":"2014","journal-title":"Impact of the Shodan computer search engine on internet-facing industrial control system devices Technical report"},{"key":"ref14","article-title":"A large-scale analysis of the security of embedded firmwares","author":"costin","year":"2014","journal-title":"USENIX Security Symposium"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2015.47"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813703"},{"key":"ref17","article-title":"An Internet-wide view of Internet-wide scanning","author":"durumeric","year":"2014","journal-title":"USENIX Security Symposium"},{"key":"ref18","article-title":"ZMap: Fast Internet-wide scanning and its security applications","author":"durumeric","year":"2013","journal-title":"Proc 22nd USENIX Security Symp"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/61.584329"},{"key":"ref4","year":"0","journal-title":"Industrial control system survey"},{"key":"ref3","year":"0","journal-title":"Distributed Network Protocol (DNP3)"},{"key":"ref6","article-title":"Zippier ZMap: Internet-wide scanning at 10 gbps","author":"adrian","year":"2014","journal-title":"USENIX Workshop on Offensive Technologies (WOOT)"},{"key":"ref5","year":"0","journal-title":"Modbus Application Protocol Specification V1 1b3"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1007\/11856214_9"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/MC.2002.1012423"},{"key":"ref49","author":"speers","year":"2014","journal-title":"Fingerprinting IEEE 802 15 4 devices with commodity radios Technical report Dartmouth Computer Science"},{"key":"ref9","article-title":"The Internet motion sensor: A distributed blackhole monitoring system","author":"bailey","year":"2005","journal-title":"Symposium on Network and Distributed System Security"},{"key":"ref46","author":"sarwate","year":"2011","journal-title":"SCADA security Why is it so hard?"},{"key":"ref45","year":"2015","journal-title":"SANS Institute The state of security in control systems today"},{"key":"ref48","author":"soulli\u00e9","year":"2014","journal-title":"Industrial control systems Pentesting PLCs 101"},{"key":"ref47","article-title":"ICS threat analysis using a large-scale honeynet","author":"serbanescu","year":"2015","journal-title":"ICS-CSR Workshops in Computing BCS"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1016\/j.isatra.2007.04.003"},{"key":"ref41","author":"radvanovsky","year":"2014","journal-title":"Project SHINE findings report"},{"key":"ref44","author":"rift","year":"0","journal-title":"CONPOT ICS\/SCADA honeypot"},{"key":"ref43","author":"mackiewicz","year":"0","journal-title":"Overview of IEC 61850 and Benefits"}],"event":{"name":"2016 14th Annual Conference on Privacy, Security and Trust (PST)","location":"Auckland, New Zealand","start":{"date-parts":[[2016,12,12]]},"end":{"date-parts":[[2016,12,14]]}},"container-title":["2016 14th Annual Conference on Privacy, Security and Trust (PST)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/7899233\/7906913\/07906943.pdf?arnumber=7906943","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2017,10,3]],"date-time":"2017-10-03T01:27:16Z","timestamp":1506994036000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/7906943\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2016,12]]},"references-count":56,"URL":"https:\/\/doi.org\/10.1109\/pst.2016.7906943","relation":{},"subject":[],"published":{"date-parts":[[2016,12]]}}}