{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,29]],"date-time":"2026-07-29T14:44:44Z","timestamp":1785336284816,"version":"3.55.0"},"reference-count":47,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"6","license":[{"start":{"date-parts":[[2025,11,1]],"date-time":"2025-11-01T00:00:00Z","timestamp":1761955200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2025,11,1]],"date-time":"2025-11-01T00:00:00Z","timestamp":1761955200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,11,1]],"date-time":"2025-11-01T00:00:00Z","timestamp":1761955200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"Applied Basic Research Program of Liaoning Province","award":["2022JH2\/101300240"],"award-info":[{"award-number":["2022JH2\/101300240"]}]},{"name":"Liaoning Provincial Science and Technology Plan","award":["2023JH2\/101700370"],"award-info":[{"award-number":["2023JH2\/101700370"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2025,11]]},"DOI":"10.1109\/tdsc.2025.3597774","type":"journal-article","created":{"date-parts":[[2025,8,11]],"date-time":"2025-08-11T17:46:04Z","timestamp":1754934364000},"page":"7495-7507","source":"Crossref","is-referenced-by-count":1,"title":["InSyfer: Industrial Control Protocols Syntax Inference via Graph Representation Learning"],"prefix":"10.1109","volume":"22","author":[{"ORCID":"https:\/\/orcid.org\/0009-0003-8668-7447","authenticated-orcid":false,"given":"Daoqing","family":"Yang","sequence":"first","affiliation":[{"name":"College of Computer Science and Engineering, Northeastern University, Shenyang, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5458-541X","authenticated-orcid":false,"given":"Yu","family":"Yao","sequence":"additional","affiliation":[{"name":"College of Computer Science and Engineering, Northeastern University, Shenyang, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4215-3307","authenticated-orcid":false,"given":"Yao","family":"Shan","sequence":"additional","affiliation":[{"name":"School of Computer and Control Engineering, Yantai University, Yantai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yunfeng","family":"Wu","sequence":"additional","affiliation":[{"name":"China Electronics Corporation Sixth Research Institute, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0009-1101-2465","authenticated-orcid":false,"given":"Xiaoli","family":"Lin","sequence":"additional","affiliation":[{"name":"College of Computer Science and Engineering, Northeastern University, Shenyang, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4471-0026","authenticated-orcid":false,"given":"Wei","family":"Yang","sequence":"additional","affiliation":[{"name":"College of Software, Northeastern University, Shenyang, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0009-1387-5846","authenticated-orcid":false,"given":"Licheng","family":"Yang","sequence":"additional","affiliation":[{"name":"College of Computer Science and Engineering, Northeastern University, Shenyang, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1016\/c2010-0-66555-2"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/3630103"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2022.3228076"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3326666"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2020.107677"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/1460877.1460894"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243804"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/2840724"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2022.07.025"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2020.3036232"},{"key":"ref11","first-page":"1","article-title":"Discoverer: Automatic protocol reverse engineering from network traces","volume-title":"Proc. USENIX Secur. Symp.","author":"Cui","year":"2007"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/2590296.2590346"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM41043.2020.9155275"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2021.24531"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2021.11.009"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2018.2867544"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/CSAC.2005.49"},{"issue":"6","key":"ref18","first-page":"1095","article-title":"Network protocol analysis using bioinformatics algorithms","volume":"26","author":"Beddoe","year":"2004","journal-title":"Toorcon"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1016\/0022-2836(70)90057-4"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/ICNP.2012.6459963"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2022.3185649"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/IFIPNetworking.2015.7145307"},{"key":"ref23","first-page":"1","article-title":"NEMESYS: Network message syntax reverse engineering by analysis of the intrinsic structure of individual messages","volume-title":"Proc. 12th USENIX Workshop Offensive Technol.","author":"Kleber","year":"2018"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2024.3371592"},{"key":"ref25","article-title":"Semi-supervised classification with graph convolutional networks","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Kipf","year":"2025"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2022.3183143"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2024.3370918"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2025.3540063"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v38i12.29246"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2024.3389966"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v33i01.33017370"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1017\/S1351324916000334"},{"issue":"11","key":"ref33","first-page":"2579","article-title":"Visualizing data using t-SNE","volume":"9","author":"Maaten","year":"2008","journal-title":"J. Mach. Learn. Res."},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1561\/2200000096"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.626"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.3390\/sym13091743"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1088\/1742-6596\/1566\/1\/012103"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1155\/2021\/6690988"},{"key":"ref39","article-title":"ICS-security-tools","author":"Yardley","year":"2025"},{"key":"ref40","article-title":"s7-pcaps","author":"Miru","year":"2025"},{"key":"ref41","article-title":"ICS-pcap","author":"Smith","year":"2025"},{"key":"ref42","first-page":"1","article-title":"Providing SCADA network data sets for intrusion detection research","volume-title":"Proc. 9th USENIX Conf. Cyber Secur. Experimentation Test","author":"Lemay","year":"2016"},{"key":"ref43","article-title":"Wireshark","author":"Combs","year":"2024"},{"key":"ref44","volume-title":"Introduction to Information Retrieval","volume":"39","author":"Sch\u00fctze","year":"2008"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3363261"},{"key":"ref46","first-page":"1409","article-title":"A statistical method for evaluating systematic relationships","volume":"28","author":"Sokal","year":"1958","journal-title":"Univ. Kansas Sci. Bull."},{"key":"ref47","article-title":"Melsec","year":"2024"}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/8858\/11242243\/11122642.pdf?arnumber=11122642","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,6,26]],"date-time":"2026-06-26T19:48:24Z","timestamp":1782503304000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11122642\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,11]]},"references-count":47,"journal-issue":{"issue":"6"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2025.3597774","relation":{},"ISSN":["1545-5971","1941-0018","2160-9209"],"issn-type":[{"value":"1545-5971","type":"print"},{"value":"1941-0018","type":"electronic"},{"value":"2160-9209","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,11]]}}}