{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,22]],"date-time":"2026-10-22T16:50:20Z","timestamp":1792687820103,"version":"4.5.0"},"reference-count":65,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62303411"],"award-info":[{"award-number":["62303411"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62293511"],"award-info":[{"award-number":["62293511"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62293510"],"award-info":[{"award-number":["62293510"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Research Foundation, Singapore, under its National Satellite of Excellence Programme \"Design Science and Technology for Secure Critical Infrastructure: Phase II\"","doi-asserted-by":"publisher","award":["NRF-NCR25-NSOE05-0001"],"award-info":[{"award-number":["NRF-NCR25-NSOE05-0001"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100022963","name":"Key Research and Development Program of Zhejiang Province","doi-asserted-by":"publisher","award":["2025C01061"],"award-info":[{"award-number":["2025C01061"]}],"id":[{"id":"10.13039\/100022963","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2025]]},"DOI":"10.1109\/tifs.2025.3629569","type":"journal-article","created":{"date-parts":[[2025,11,26]],"date-time":"2025-11-26T19:03:07Z","timestamp":1764183787000},"page":"12445-12459","source":"Crossref","is-referenced-by-count":2,"title":["ADIS: Detecting and Identifying Manipulated PLC Program Variables Using State-Aware Dependency Graph"],"prefix":"10.1109","volume":"20","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-1596-6890","authenticated-orcid":false,"given":"Zeyu","family":"Yang","sequence":"first","affiliation":[{"name":"iTrust, Singapore University of Technology and Design, Tampines, Singapore"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0741-8795","authenticated-orcid":false,"given":"Liang","family":"He","sequence":"additional","affiliation":[{"name":"School of Computing, University of Nebraska-Lincoln, Lincoln, NE, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yujiao","family":"Hu","sequence":"additional","affiliation":[{"name":"College of Control Science and Engineering, Zhejiang University, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4221-2162","authenticated-orcid":false,"given":"Peng","family":"Cheng","sequence":"additional","affiliation":[{"name":"College of Control Science and Engineering, Zhejiang University, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3155-3145","authenticated-orcid":false,"given":"Jiming","family":"Chen","sequence":"additional","affiliation":[{"name":"College of Control Science and Engineering, Zhejiang University, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0594-0432","authenticated-orcid":false,"given":"Jianying","family":"Zhou","sequence":"additional","affiliation":[{"name":"iTrust, Singapore University of Technology and Design, Tampines, Singapore"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","first-page":"1","article-title":"SoK: Security of programmable logic controllers","volume-title":"Proc. 33th USENIX Secur. Symp.","author":"L\u00f3pez-Morales"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2024.23049"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/3658644.3690195"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2024.3384146"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2025.3581434"},{"key":"ref6","volume-title":"The Iran Steel Industry Cyber Attack Explained","author":"Smith","year":"2022"},{"key":"ref7","volume-title":"Hackers Knew How to Target PLCs in Israel Water Facility Attacks: Sources","year":"2020"},{"key":"ref8","volume-title":"Triton is the World\u2019s Most Murderous Malware, and It\u2019s Spreading","author":"Giles","year":"2019"},{"issue":"6","key":"ref9","first-page":"29","article-title":"W32. Stuxnet dossier","volume":"5","author":"Falliere","year":"2011","journal-title":"Symantec Secur. Response"},{"key":"ref10","volume-title":"In Florida, a Near-Miss With a Cybersecurity Worst-Case Scenario","author":"Collier","year":"2021"},{"key":"ref11","volume-title":"Programming With STEP 7","year":"2017"},{"key":"ref12","volume-title":"SoMachine Programming Guide","year":"2018"},{"key":"ref13","volume-title":"MicroLogix 1400 Programmable Controllers User Manual","year":"2021"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.14722\/bar.2019.23074"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/3176258.3176319"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/CSR54599.2022.9850326"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/3274694.3274745"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/3560905.3568521"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/3471621.3471864"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23043"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2015.2489184"},{"key":"ref22","first-page":"21","article-title":"PLCverif re-engineered: An open platform for the formal analysis of PLC programs","volume-title":"Proc. 17th Int. Conf. Accel. Large Experim. Phys. Control Syst.","author":"Vi\u00f1uela"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1007\/s41635-017-0017-y"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/3134600.3134618"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/RWEEK.2016.7573309"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23265"},{"key":"ref27","first-page":"333","article-title":"PLC-Sleuth: Detecting and localizing PLC intrusions using control invariants","volume-title":"Proc. 23rd Int. Symp. Res. Attacks, Intrusions Defenses (RAID)","author":"Yang"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/3468264.3468617"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00034"},{"key":"ref30","first-page":"6597","article-title":"SAIN: Improving ICS attack detection sensitivity via state-aware invariants","volume-title":"Proc. 33th USENIX Secur. Symp.","author":"Abbas"},{"key":"ref31","volume-title":"OpenPLC Runtime Version 3","year":"2021"},{"key":"ref32","volume-title":"CODESYS Device Directory","year":"2019"},{"key":"ref33","volume-title":"Awlsim: S7 Compatible PLC\/SPS","year":"2020"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/ICCPS48487.2020.00011"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/DSN58367.2023.00044"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2024.3434622"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23271"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/3605758.3623499"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2024.3402117"},{"key":"ref40","first-page":"1","article-title":"Rogue7: Rogue engineering station attacks on S7 simatic PLCs","volume-title":"Proc. BlackHat","author":"Biham","year":"2019"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2020.2989810"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1016\/j.knosys.2020.106527"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2023.3301046"},{"key":"ref44","volume-title":"Enterprise-Control System Integration Part 3: Activity Models of Manufacturing Operations Management","year":"2005"},{"key":"ref45","volume-title":"Rockwell Automation Logix Controllers"},{"key":"ref46","volume-title":"SSA-381684: Improper Password Protection During Authentication in SIMATIC S7-300 and S7-400 CPUs and Derived Products","year":"2020"},{"key":"ref47","volume-title":"Security Notification\u2014Modicon M100\/M200\/M221 Programmable Logic Controller (V3.0)","year":"2021"},{"key":"ref48","first-page":"1","article-title":"Analysis of the cyber attack on the Ukrainian power grid","volume-title":"Electr. Inf. Sharing Anal. Center (E-ISAC)","volume":"388","year":"2016"},{"key":"ref49","volume-title":"Exploitation of Unitronics PLCs Used in Water and Wastewater Systems","year":"2023"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM52122.2024.10621405"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1145\/3627106.3627179"},{"key":"ref52","volume-title":"Demo Video of Manipulating Program Variables of Siemens S7-317 PLC in Elevator Control System","year":"2024"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4612-1768-8_11"},{"key":"ref54","volume-title":"Demo Video of Manipulating Program Variables of Siemens S7-315 PLC in Ethanol Distillation System","year":"2025"},{"key":"ref55","volume-title":"STEP 7 and WinCC Engineering V17","year":"2021"},{"key":"ref56","volume-title":"Upload PLC Program From a Compactlogix\/Controllogix PLC Studio 5000","year":"2020"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978388"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1145\/3564625.3564633"},{"key":"ref59","first-page":"7153","article-title":"GeCos replacing experts: Generalizable and comprehensible industrial intrusion detection","volume-title":"Proc. 34th USENIX Security Symp.","author":"Wolsing"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23313"},{"key":"ref61","first-page":"895","article-title":"SAVIOR: Securing autonomous vehicles with robust physical invariants","volume-title":"Proc. 29th USENIX Secur. Symp.","author":"Quinonez"},{"key":"ref62","first-page":"165","article-title":"PAtt: Physics-based attestation of control systems","volume-title":"Proc. 22nd Int. Symp. Res. Attacks","author":"Ghaeini"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1145\/3678890.3678896"},{"key":"ref64","volume-title":"Compilers Principles, Techniques & Tools","author":"Aho","year":"2007"},{"key":"ref65","volume-title":"Multivariable Feedback Control: Analysis and Design","author":"Skogestad","year":"2005"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/10206\/10810755\/11269369.pdf?arnumber=11269369","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,11,28]],"date-time":"2025-11-28T18:42:14Z","timestamp":1764355334000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11269369\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025]]},"references-count":65,"URL":"https:\/\/doi.org\/10.1109\/tifs.2025.3629569","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"value":"1556-6013","type":"print"},{"value":"1556-6021","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025]]}}}