{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,10]],"date-time":"2026-06-10T14:19:15Z","timestamp":1781101155247,"version":"3.54.1"},"reference-count":68,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"6","license":[{"start":{"date-parts":[[2022,11,1]],"date-time":"2022-11-01T00:00:00Z","timestamp":1667260800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"DOI":"10.13039\/501100001602","name":"Science Foundation Ireland","doi-asserted-by":"publisher","award":["13\/RC\/2094_P2"],"award-info":[{"award-number":["13\/RC\/2094_P2"]}],"id":[{"id":"10.13039\/501100001602","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001602","name":"Science Foundation Ireland","doi-asserted-by":"publisher","award":["16\/RC\/3918"],"award-info":[{"award-number":["16\/RC\/3918"]}],"id":[{"id":"10.13039\/501100001602","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2022,11,1]]},"DOI":"10.1109\/tdsc.2021.3113989","type":"journal-article","created":{"date-parts":[[2021,9,21]],"date-time":"2021-09-21T20:05:48Z","timestamp":1632254748000},"page":"3955-3970","source":"Crossref","is-referenced-by-count":8,"title":["Grounds for Suspicion: Physics-Based Early Warnings for Stealthy Attacks on Industrial Control Systems"],"prefix":"10.1109","volume":"19","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-0384-5861","authenticated-orcid":false,"given":"Mazen","family":"Azzam","sequence":"first","affiliation":[{"name":"Lero, the Irish Software Research Centre, University of Limerick, Limerick, Ireland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9673-3054","authenticated-orcid":false,"given":"Liliana","family":"Pasquale","sequence":"additional","affiliation":[{"name":"Lero, University College Dublin, Dublin, Ireland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3678-046X","authenticated-orcid":false,"given":"Gregory","family":"Provan","sequence":"additional","affiliation":[{"name":"Lero, University College Cork, Cork, Ireland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Bashar","family":"Nuseibeh","sequence":"additional","affiliation":[{"name":"Lero, the Irish Software Research Centre, University of Limerick, Limerick, Ireland"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref39","first-page":"331","article-title":"Quantifying the impact of cyber-attack strategies for control systems equipped with an anomaly detector","author":"milo\u0161evi?","year":"2018","journal-title":"Proc Eur Control Conf"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1021\/ie010464l"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-21568-2_10"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.5121\/csit.2018.80105"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2010.2099234"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/3274694.3274724"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/TAC.2017.2761762"},{"key":"ref36","article-title":"Security metrics of networked control systems under sensor attacks (extended preprint)","author":"murguia","year":"2018"},{"key":"ref35","first-page":"1","article-title":"Sensing for suspicion at scale: A Bayesian approach for cyber conflict attribution and reasoning","author":"kalutarage","year":"2012","journal-title":"Proc Int Conf Cyber Conflict"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/ITCC.2004.1286727"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1109\/ComComAp.2014.7017178"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2018.2871866"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/TIE.2009.2035462"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.14236\/ewic\/ICS2016.16"},{"key":"ref28","first-page":"36","article-title":"How do we effectively monitor for slow suspicious activities?","author":"kalutarage","year":"2013","journal-title":"Proc Int Symp Eng Secure Softw Syst Doctoral Symp"},{"key":"ref64","article-title":"Incident handling, forensics sensors and information sources in industrial control systems","author":"sand","year":"2019"},{"key":"ref27","first-page":"20","article-title":"Early warning system on a national level: Project AMSEL","author":"apel","year":"2010","journal-title":"Proc 1st Eur Workshop Internet Early Warning Netw Intell"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1145\/3295453.3295454"},{"key":"ref66","first-page":"1217","article-title":"Live forensics of software attacks on cyber–physical systems","author":"al-sharif","year":"2018","journal-title":"Future Gener Comput Syst"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/CSCloud.2015.35"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-26601-1_9"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijcip.2018.10.006"},{"key":"ref2","article-title":"SANS ICS Defense Use Case (DUC) Dec 30 2014: ICS CP\/PE case study paper- German Steel Mill Cyber Attack","author":"lee","year":"2014"},{"key":"ref1","author":"alur","year":"2015","journal-title":"Principles of Cyber-Physical Systems"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/Allerton.2012.6483441"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/CCTA.2017.8062639"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.23919\/ECC.2019.8796117"},{"key":"ref24","first-page":"34","article-title":"Accumulating evidence of insider attacks","author":"chivers","year":"2009","journal-title":"Proc Int Workshop Manag Insider Secur Threats"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/ACC.2016.7524932"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/MetroInd4.0IoT48571.2020.9138184"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/CDC.2018.8619332"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1016\/0959-1524(96)00031-5"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1088\/1757-899X\/569\/4\/042030"},{"key":"ref59","article-title":"Comparison between networked control system behaviour based on can and switched ethernet networks","author":"brahimi","year":"2006"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1007\/s00521-018-3729-1"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/MCS.2003.1200240"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1016\/j.ifacol.2015.08.199"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1145\/1966913.1966959"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-24864-1_4"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-41488-6_12"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1016\/j.compeleceng.2013.11.018"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.23919\/ACC.2018.8431582"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/RTSS.2017.00035"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978388"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-46430-1_19"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/CDC.2006.377036"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1017\/CBO9780511804441"},{"key":"ref15","article-title":"Efficient predictive monitoring of linear time-invariant systems under stealthy attacks","author":"azzam","year":"2021"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/2592791.2592792"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1016\/j.jisa.2016.06.003"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/MELCON.2014.6820573"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/WETICE.2019.00057"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/3203245"},{"key":"ref3","article-title":"Analysis of the cyber attack on the Ukrainian Power Grid: Defense use case","author":"lee","year":"2016"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/TAC.2013.2266831"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/ACC.2015.7170734"},{"key":"ref8","first-page":"29","article-title":"Early warning systems for cyber defence","author":"kalutarage","year":"2015","journal-title":"Proc Int Workshop Open Problems Netw Secur"},{"key":"ref7","first-page":"151","article-title":"Towards early warning systems–challenges, technologies and architecture","author":"apel","year":"2009","journal-title":"Proc Int Workshop Crit Inf Infrastructures Secur"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1016\/0959-1524(93)80006-W"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1002\/sec.1647"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1016\/j.ifacol.2019.06.098"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1016\/j.automatica.2014.10.067"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1016\/0098-1354(93)80018-I"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.23919\/ACC.2018.8431300"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/2714576.2714599"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243781"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijcip.2009.06.001"},{"key":"ref43","article-title":"No need to know physics: Resilience of process-based model-free anomaly detection for industrial control systems","author":"erba","year":"2020"}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8858\/9945627\/09543568.pdf?arnumber=9543568","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,12,12]],"date-time":"2022-12-12T19:24:05Z","timestamp":1670873045000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9543568\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,11,1]]},"references-count":68,"journal-issue":{"issue":"6"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2021.3113989","relation":{},"ISSN":["1545-5971","1941-0018","2160-9209"],"issn-type":[{"value":"1545-5971","type":"print"},{"value":"1941-0018","type":"electronic"},{"value":"2160-9209","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022,11,1]]}}}