{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,25]],"date-time":"2026-02-25T15:15:32Z","timestamp":1772032532842,"version":"3.50.1"},"publisher-location":"New York, NY, USA","reference-count":16,"publisher":"ACM","license":[{"start":{"date-parts":[[2016,5,30]],"date-time":"2016-05-30T00:00:00Z","timestamp":1464566400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"Vinnova"},{"name":"Formas"},{"name":"Swedish Civil Contingencies Agency (MSB)"},{"name":"Swedish Energy Agency"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2016,5,30]]},"DOI":"10.1145\/2899015.2899028","type":"proceedings-article","created":{"date-parts":[[2016,5,24]],"date-time":"2016-05-24T22:58:31Z","timestamp":1464130711000},"page":"44-51","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":42,"title":["Exploiting Bro for Intrusion Detection in a SCADA System"],"prefix":"10.1145","author":[{"given":"Robert","family":"Udd","sequence":"first","affiliation":[{"name":"Sectra AB, Linkoping, Sweden"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mikael","family":"Asplund","sequence":"additional","affiliation":[{"name":"Link\u00f6ping University, Linkoping, Sweden"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Simin","family":"Nadjm-Tehrani","sequence":"additional","affiliation":[{"name":"Link\u00f6ping University, Linkoping, Sweden"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mehrdad","family":"Kazemtabrizi","sequence":"additional","affiliation":[{"name":"The Royal Institute of Technology, Stockholm, Sweden"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mathias","family":"Ekstedt","sequence":"additional","affiliation":[{"name":"The Royal Institute of Technology, Stockholm, Sweden"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2016,5,30]]},"reference":[{"key":"e_1_3_2_1_2_1","volume-title":"Adelphi","author":"Chang R. J.","year":"2013","unstructured":"R. J. Chang , R. E. Harang , and G. S. Payer . Extremely lightweight intrusion detection (elide). Technical report , Adelphi , Army Research Laboratory , 2013 . R. J. Chang, R. E. Harang, and G. S. Payer. Extremely lightweight intrusion detection (elide). Technical report, Adelphi, Army Research Laboratory, 2013."},{"key":"e_1_3_2_1_3_1","volume-title":"Newnes","author":"Clarke G. R.","year":"2004","unstructured":"G. R. Clarke , D. Reynders , and E. Wright . Practical modern SCADA protocols: DNP3, 60870.5 and related systems . Newnes , 2004 . G. R. Clarke, D. Reynders, and E. Wright. Practical modern SCADA protocols: DNP3, 60870.5 and related systems. Newnes, 2004."},{"key":"e_1_3_2_1_4_1","volume-title":"Incremental calculation of weighted mean and variance","author":"Finch T.","year":"2009","unstructured":"T. Finch . Incremental calculation of weighted mean and variance . University of Cambridge , 4, 2009 . T. Finch. Incremental calculation of weighted mean and variance. University of Cambridge, 4, 2009."},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1109\/IWCMC.2015.7289234"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-68351-3_19"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1145\/2664243.2664277"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1109\/GLOCOMW.2012.6477809"},{"key":"e_1_3_2_1_9_1","article-title":"Internet of things: Architectural framework for ehealth security","author":"Lake D.","year":"2014","unstructured":"D. Lake , R. Milito , M. Morrow , and R. Vargheese . Internet of things: Architectural framework for ehealth security . Journal of ICT, 3&4 , 2014 . D. Lake, R. Milito, M. Morrow, and R. Vargheese. Internet of things: Architectural framework for ehealth security. Journal of ICT, 3&4, 2014.","journal-title":"Journal of ICT, 3&4"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/2659651.2659746"},{"key":"e_1_3_2_1_11_1","volume-title":"Proceedings for the Army Science Conference (24th)","author":"Matt B.","unstructured":"B. Matt . The cost of protection measures in tactical networks . In Proceedings for the Army Science Conference (24th) , Orlando, Florida. B. Matt. The cost of protection measures in tactical networks. In Proceedings for the Army Science Conference (24th), Orlando, Florida."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.14236\/ewic\/ics-csr2014.5"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/2542049"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1016\/S1389-1286(99)00112-7"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1109\/SmartGridComm.2014.7007777"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1109\/PESMG.2013.6672100"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/2808783.2808795"}],"event":{"name":"ASIA CCS '16: ACM Asia Conference on Computer and Communications Security","location":"Xi'an China","acronym":"ASIA CCS '16","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2nd ACM International Workshop on Cyber-Physical System Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2899015.2899028","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2899015.2899028","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T04:39:16Z","timestamp":1750221556000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2899015.2899028"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2016,5,30]]},"references-count":16,"alternative-id":["10.1145\/2899015.2899028","10.1145\/2899015"],"URL":"https:\/\/doi.org\/10.1145\/2899015.2899028","relation":{},"subject":[],"published":{"date-parts":[[2016,5,30]]},"assertion":[{"value":"2016-05-30","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}