{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,16]],"date-time":"2026-05-16T03:18:36Z","timestamp":1778901516102,"version":"3.51.4"},"reference-count":48,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"3","license":[{"start":{"date-parts":[[2026,5,1]],"date-time":"2026-05-01T00:00:00Z","timestamp":1777593600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,5,1]],"date-time":"2026-05-01T00:00:00Z","timestamp":1777593600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,5,1]],"date-time":"2026-05-01T00:00:00Z","timestamp":1777593600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U2468204"],"award-info":[{"award-number":["U2468204"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U2436208"],"award-info":[{"award-number":["U2436208"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62372129"],"award-info":[{"award-number":["62372129"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62272119"],"award-info":[{"award-number":["62272119"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Guangdong S&amp;T Program","award":["2024B0101010002"],"award-info":[{"award-number":["2024B0101010002"]}]},{"name":"Project of Guangdong Key Laboratory of Industrial Control System Security","award":["2024B1212020010"],"award-info":[{"award-number":["2024B1212020010"]}]},{"name":"Shandong Province Key R&amp;D Project","award":["2025CXGC010901"],"award-info":[{"award-number":["2025CXGC010901"]}]},{"name":"Guangzhou Basic and Applied Basic Research Project","award":["2024A04J9969"],"award-info":[{"award-number":["2024A04J9969"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2026,5]]},"DOI":"10.1109\/tdsc.2026.3665837","type":"journal-article","created":{"date-parts":[[2026,2,17]],"date-time":"2026-02-17T21:11:26Z","timestamp":1771362686000},"page":"6568-6583","source":"Crossref","is-referenced-by-count":0,"title":["Pipe4Stux: Attacking PLC by Using Key Tag and Attack Semantic"],"prefix":"10.1109","volume":"23","author":[{"ORCID":"https:\/\/orcid.org\/0009-0002-4994-9586","authenticated-orcid":false,"given":"Wenjun","family":"Yao","sequence":"first","affiliation":[{"name":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0305-2132","authenticated-orcid":false,"given":"Binxing","family":"Fang","sequence":"additional","affiliation":[{"name":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8157-5337","authenticated-orcid":false,"given":"Yanbin","family":"Sun","sequence":"additional","affiliation":[{"name":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0000-0354-8934","authenticated-orcid":false,"given":"Guodong","family":"Wu","sequence":"additional","affiliation":[{"name":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9409-5359","authenticated-orcid":false,"given":"Zhihong","family":"Tian","sequence":"additional","affiliation":[{"name":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2024.23049"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSPW59978.2023.00045"},{"issue":"6","key":"ref3","first-page":"29","article-title":"W32.Stuxnet Dossier","volume":"5","author":"Falliere","year":"2011","journal-title":"Secur. Res."},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/SmartGridComm.2014.7007754"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23313"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/3565570"},{"key":"ref7","article-title":"SoK: Security of programmable logic controllers","author":"L\u00f3pez-Morales","year":"2024"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/ICIT46573.2021.9453483"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-72817-9_8"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.14722\/bar.2019.23074"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/TSUSC.2024.3419126"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2023.3318988"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-30215-3_20"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-22312-0_3"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/CSR54599.2022.9850326"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2024.3402117"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP51992.2021.00034"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/3140241.3140254"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/3320269.3384730"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/3560905.3568521"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/3627106.3627179"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/TNSE.2021.3130602"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382244"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10179411"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2020.3046267"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/TPWRS.2016.2631891"},{"key":"ref27","article-title":"Dangerous stuff\u2019: Hackers tried to poison water supply of Florida town","author":"Robles","year":"2021"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1016\/j.rser.2016.01.025"},{"key":"ref29","volume-title":"IEC 61131\u20133: Programming Industrial Automation Systems","author":"Tiegelkamp","year":"2010"},{"key":"ref30","article-title":"Large language models in cybersecurity: State-of-the-art","author":"Motlagh","year":"2024"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/3372823"},{"key":"ref32","article-title":"Python-snap7 documentation","author":"Molenaar","year":"2017"},{"key":"ref33","first-page":"333","article-title":"PLC-Sleuth: Detecting and localizing PLC intrusions using control invariants","volume-title":"Proc. 23rd Int. Symp. Res. Attacks Intrusions Defenses","author":"Yang"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2020.3040237"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23271"},{"key":"ref36","article-title":"Program analysis and specialization for the C programming language","author":"Andersen","year":"1994"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.4018\/IJDCF.325062"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-49475-3"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1103\/PhysRevC.52.2620"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-45848-4_57"},{"key":"ref41","article-title":"Simatic automation compare tool","year":"2025"},{"issue":"05","key":"ref42","first-page":"1230","article-title":"Development of deception defense technology and exploration of its large language model applications","volume":"61","author":"Rui","year":"2024","journal-title":"J. Comput. Res. Develop."},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.15302\/j-sscae-2023.06.007"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/tse.2023.3315292"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1145\/3106237.3106245"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00034"},{"key":"ref47","first-page":"1","article-title":"PLC-blaster: A worm living solely in the PLC","volume-title":"Proc. Black Hat Asia","volume":"16","author":"Spenneberg","year":"2016"},{"key":"ref48","first-page":"1","article-title":"Ghost in the PLC: Designing an undetectable programmable logic controller rootkit via pin control attack","volume-title":"Proc. Black Hat Europe","author":"Abbasi"}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/8858\/11517592\/11397561.pdf?arnumber=11397561","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,5,16]],"date-time":"2026-05-16T03:04:25Z","timestamp":1778900665000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11397561\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,5]]},"references-count":48,"journal-issue":{"issue":"3"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2026.3665837","relation":{},"ISSN":["1545-5971","1941-0018","2160-9209"],"issn-type":[{"value":"1545-5971","type":"print"},{"value":"1941-0018","type":"electronic"},{"value":"2160-9209","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,5]]}}}