{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,4]],"date-time":"2026-01-04T02:52:15Z","timestamp":1767495135562,"version":"3.37.3"},"reference-count":39,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2020]]},"DOI":"10.1109\/tifs.2019.2940890","type":"journal-article","created":{"date-parts":[[2019,9,11]],"date-time":"2019-09-11T19:42:28Z","timestamp":1568230948000},"page":"1455-1469","source":"Crossref","is-referenced-by-count":22,"title":["Temporal Execution Behavior for Host Anomaly Detection in Programmable Logic Controllers"],"prefix":"10.1109","volume":"15","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-0491-8241","authenticated-orcid":false,"given":"David","family":"Formby","sequence":"first","affiliation":[]},{"given":"Raheem","family":"Beyah","sequence":"additional","affiliation":[]}],"member":"263","reference":[{"journal-title":"Logix 5000 Controllers Tasks Programs and Routines","year":"2018","key":"ref39"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/3084456"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/TIT.1976.1055638"},{"journal-title":"Kolmogorov–Smirnov Test","first-page":"283","year":"2008","key":"ref32"},{"journal-title":"Mr PLC Your Automation Help Site","year":"2018","key":"ref31"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1093\/biomet\/41.1-2.100"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1145\/1653662.1653711"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/2046707.2046711"},{"journal-title":"Micrologix 1400 Programmable Controllers Instruction set Reference Manual","year":"0","key":"ref35"},{"journal-title":"Micrologix 1100 Programmable Controllers Instruction set Reference Manual","year":"2018","key":"ref34"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/THS.2008.4534498"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/2459976.2459982"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2010.2099234"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/AINA.2010.86"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/CISS.2010.5464816"},{"key":"ref15","first-page":"355","article-title":"Attacks against process control systems: Risk assessment, detection, and response","author":"c\u00e1rdenas","year":"2011","journal-title":"Proc 6th ACM Symp Inf Comput Commun Secur (ASIACCS)"},{"key":"ref16","first-page":"1","article-title":"Who’s in control of your control system? device fingerprinting for cyber-physical systems","author":"formby","year":"2016","journal-title":"Proc Network and Distributed System Security Symp (NDSS)"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23043"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/2991079.2991126"},{"key":"ref19","first-page":"1","article-title":"Wattsupdoc: Power side channels to nonintrusively discover untargeted malware on embedded medical devices","author":"clark","year":"2013","journal-title":"Proc USENIX Workshop Health Inf Technol"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382244"},{"journal-title":"Out of Control Ransomware for Industrial Control Systems","year":"2018","author":"formby","key":"ref4"},{"journal-title":"The Industrial Control System Cyber Kill Chain","year":"2018","author":"assante","key":"ref27"},{"journal-title":"Out of Control Ransomware for Industrial Control Systems","year":"2018","author":"formby","key":"ref3"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.2004.1301329"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23313"},{"journal-title":"Mar-17-352-01 HatmanSafety System Targeted Malware","year":"2017","key":"ref5"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/1095810.1095812"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.45"},{"journal-title":"To Kill a Centrifuge","year":"2013","author":"langner","key":"ref2"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/3134600.3134621"},{"journal-title":"Nccic\/ics-cert year in review 2015","year":"2016","key":"ref1"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/2931037.2931065"},{"key":"ref22","first-page":"1095","article-title":"Watch me, but don’t touch me! contactless control flow monitoring via electromagnetic emanations","author":"han","year":"2017","journal-title":"Proc ACM SIGSAC Conf Comput Commun Secur (CCS)"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/3079856.3080223"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/3134600.3134618"},{"journal-title":"The $22 000-Per-Minute Manufacturing Problem","year":"2006","author":"lafond","key":"ref23"},{"journal-title":"Intelligence-Driven Computer Network Defense Informed by Analysis of Adversary Campaigns and Intrusion Kill Chains","year":"2018","author":"hutchins","key":"ref26"},{"journal-title":"171cbu98091 Unity m1e Processor-Rs232\/485-Ethernet-USB-i\/o Bus- Global Data","year":"2018","key":"ref25"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/10206\/8833568\/08832261.pdf?arnumber=8832261","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,4,27]],"date-time":"2022-04-27T17:00:15Z","timestamp":1651078815000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/8832261\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020]]},"references-count":39,"URL":"https:\/\/doi.org\/10.1109\/tifs.2019.2940890","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"type":"print","value":"1556-6013"},{"type":"electronic","value":"1556-6021"}],"subject":[],"published":{"date-parts":[[2020]]}}}