{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,14]],"date-time":"2026-03-14T17:57:11Z","timestamp":1773511031103,"version":"3.50.1"},"publisher-location":"New York, NY, USA","reference-count":34,"publisher":"ACM","license":[{"start":{"date-parts":[[2016,10,28]],"date-time":"2016-10-28T00:00:00Z","timestamp":1477612800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2016,10,28]]},"DOI":"10.1145\/2994487.2994490","type":"proceedings-article","created":{"date-parts":[[2016,10,31]],"date-time":"2016-10-31T12:29:21Z","timestamp":1477916961000},"page":"1-12","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":16,"title":["Automatic Construction of Statechart-Based Anomaly Detection Models for Multi-Threaded SCADA via Spectral Analysis"],"prefix":"10.1145","author":[{"given":"Amit","family":"Kleinmann","sequence":"first","affiliation":[{"name":"Tel Aviv University, Tel-Aviv, Israel"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Avishai","family":"Wool","sequence":"additional","affiliation":[{"name":"Tel Aviv University, Tel-Aviv, Israel"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2016,10,28]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"Afcon Technologies. Pulse HMI software 2015. {Online; accessed 24-Nov-2015}.  Afcon Technologies. Pulse HMI software 2015. {Online; accessed 24-Nov-2015}."},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-17127-2_2"},{"key":"e_1_3_2_1_3_1","volume-title":"Auerbach Publications","author":"Atassi A.","year":"2014"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1109\/NOMS.2012.6211945"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1109\/ETFA.2012.6489745"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/PST.2010.5593242"},{"key":"e_1_3_2_1_7_1","volume-title":"Proceedings of the International Infrastructure Survivability Workshop","author":"Byres E. J.","year":"2004"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/2732198.2732200"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1109\/CPSNA.2013.6614240"},{"key":"e_1_3_2_1_10_1","first-page":"127","volume-title":"Proceedings of the SCADA Security Scientific Symposium","author":"Cheung S.","year":"2007"},{"key":"e_1_3_2_1_11_1","volume-title":"USA","author":"Dolev D.","year":"1981"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijcip.2015.05.001"},{"key":"e_1_3_2_1_13_1","volume-title":"Symantec Corp.","author":"Falliere N.","year":"2011"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1109\/AINA.2010.86"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijcip.2013.05.001"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1109\/EC2ND.2011.10"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1016\/0167-6423(87)90035-9"},{"issue":"2","key":"e_1_3_2_1_18_1","first-page":"37","article-title":"Accurate modeling of the siemens S7 SCADA protocol for intrusion detection and digital forensic","volume":"9","author":"Kleinmann A.","year":"2014","journal-title":"JDFSL"},{"key":"e_1_3_2_1_19_1","first-page":"132","volume-title":"10th Critical Information Infrastructures Security (CRITIS)","author":"Kleinmann A.","year":"2015"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"crossref","unstructured":"A. Kleinmann and A. Wool. Automatic construction of statechart-based anomaly detection models for multi-threaded industrial control systems. arXiv preprint cs.CR\/1607.07489 2016.  A. Kleinmann and A. Wool. Automatic construction of statechart-based anomaly detection models for multi-threaded industrial control systems. arXiv preprint cs.CR\/1607.07489 2016.","DOI":"10.1145\/2994487.2994490"},{"key":"e_1_3_2_1_21_1","volume-title":"Blackhat USA 2015","author":"Klick J.","year":"2015"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2011.67"},{"key":"e_1_3_2_1_23_1","volume-title":"Bundesamt fur Sicherheit in der Informationstechnik","author":"Maiziere T. D.","year":"2014"},{"key":"e_1_3_2_1_24_1","unstructured":"R. T. Marsh. Critical foundations: Protecting america's infrastructures - the report of the president's commission on critical infrastructure protection. Technical report October 1997.  R. T. Marsh. Critical foundations: Protecting america's infrastructures - the report of the president's commission on critical infrastructure protection. Technical report October 1997."},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1109\/65.283931"},{"key":"e_1_3_2_1_26_1","volume-title":"1997 National Information Systems Security Conference","author":"Porras P. A.","year":"1997"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.5555\/1039834.1039864"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2010.25"},{"key":"e_1_3_2_1_29_1","volume-title":"Black Hat Asia","author":"Spenneberg R.","year":"2016"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1109\/THS.2009.5168010"},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/1007568.1007586"},{"key":"e_1_3_2_1_33_1","unstructured":"T. Wiens. S7comm wireshark dissector plugin January 2014. Available at: http:\/\/sourceforge.net\/projects\/s7commwireshark.  T. Wiens. S7comm wireshark dissector plugin January 2014. Available at: http:\/\/sourceforge.net\/projects\/s7commwireshark."},{"key":"e_1_3_2_1_34_1","first-page":"12","volume-title":"5th Intl. Topical Meeting on Nuclear Plant Instrumentation, Control and Human Machine Interface Technologies","author":"Yang D.","year":"2006"},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1109\/TR.2004.823851"}],"event":{"name":"CCS'16: 2016 ACM SIGSAC Conference on Computer and Communications Security","location":"Vienna Austria","acronym":"CCS'16","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2nd ACM Workshop on Cyber-Physical Systems Security and Privacy"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2994487.2994490","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2994487.2994490","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T03:39:41Z","timestamp":1750217981000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2994487.2994490"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2016,10,28]]},"references-count":34,"alternative-id":["10.1145\/2994487.2994490","10.1145\/2994487"],"URL":"https:\/\/doi.org\/10.1145\/2994487.2994490","relation":{},"subject":[],"published":{"date-parts":[[2016,10,28]]},"assertion":[{"value":"2016-10-28","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}