{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,19]],"date-time":"2026-09-19T12:51:17Z","timestamp":1789822277801,"version":"4.0.1"},"publisher-location":"New York, NY, USA","reference-count":22,"publisher":"ACM","license":[{"start":{"date-parts":[[2016,10,28]],"date-time":"2016-10-28T00:00:00Z","timestamp":1477612800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"EPSRC\/CHIST-ERA","award":["DYPOSIT: Dynamic Policies for Shared Cyber-Physical EP\/N021657\/1"],"award-info":[{"award-number":["DYPOSIT: Dynamic Policies for Shared Cyber-Physical EP\/N021657\/1"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2016,10,28]]},"DOI":"10.1145\/2994487.2994496","type":"proceedings-article","created":{"date-parts":[[2016,10,31]],"date-time":"2016-10-31T12:29:21Z","timestamp":1477916961000},"page":"23-34","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":23,"title":["SENAMI"],"prefix":"10.1145","author":[{"given":"William","family":"Jardine","sequence":"first","affiliation":[{"name":"MWR InfoSecurity, Basingstoke, United Kingdom"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Sylvain","family":"Frey","sequence":"additional","affiliation":[{"name":"Security Lancaster, Lancaster, United Kingdom"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Benjamin","family":"Green","sequence":"additional","affiliation":[{"name":"Security Lancaster, Lancaster, United Kingdom"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Awais","family":"Rashid","sequence":"additional","affiliation":[{"name":"Security Lancaster, Lancaster, United Kingdom"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2016,10,28]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"https:\/\/www.snort.org\/. {Online: accessed August 1st 2016}","unstructured":"Snort. https:\/\/www.snort.org\/. {Online: accessed August 1st 2016} . Snort. https:\/\/www.snort.org\/. {Online: accessed August 1st 2016}."},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1145\/2808705.2808711"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.14236\/ewic\/ICS2016.2"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1145\/2732198.2732200"},{"key":"e_1_3_2_1_5_1","volume-title":"Intrusion detection systems","author":"Di Pietro R.","year":"2008","unstructured":"R. Di Pietro and L. V. Mancini . Intrusion detection systems , volume 38 . Springer Science & Business Media , 2008 . R. Di Pietro and L. V. Mancini. Intrusion detection systems, volume 38. Springer Science & Business Media, 2008."},{"key":"e_1_3_2_1_6_1","unstructured":"Digital Bond. PLCScan 2016.  Digital Bond. PLCScan 2016."},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1145\/2897035.2897036"},{"key":"e_1_3_2_1_8_1","volume-title":"f\u00fcr Sicherheit in der Informationstechnik. Die lageder it-sicherheit in deutschland","author":"B.","year":"2014","unstructured":"B. f\u00fcr Sicherheit in der Informationstechnik. Die lageder it-sicherheit in deutschland 2014 . https:\/\/www.bsi.bund.de\/DE\/Publikationen\/Lageberichte\/lageberichtenode.html. {Online: accessed May 29th 2015}. B. f\u00fcr Sicherheit in der Informationstechnik. Die lageder it-sicherheit in deutschland 2014. https:\/\/www.bsi.bund.de\/DE\/Publikationen\/Lageberichte\/lageberichtenode.html. {Online: accessed May 29th 2015}."},{"key":"e_1_3_2_1_9_1","first-page":"175","volume-title":"Critical Infrastructure Protection, Post-Proceedings of the First Annual IFIP Working Group 11.10 International Conference on Critical Infrastructure Protection","author":"Gonz\u00e1lez J.","year":"2007","unstructured":"J. Gonz\u00e1lez and M. Papa . Passive scanning in modbus networks . In Critical Infrastructure Protection, Post-Proceedings of the First Annual IFIP Working Group 11.10 International Conference on Critical Infrastructure Protection , Dartmouth College , Hanover, New Hampshire, USA, March 19-21, 2007 , pages 175 -- 187 , 2007. J. Gonz\u00e1lez and M. Papa. Passive scanning in modbus networks. In Critical Infrastructure Protection, Post-Proceedings of the First Annual IFIP Working Group 11.10 International Conference on Critical Infrastructure Protection, Dartmouth College, Hanover, New Hampshire, USA, March 19-21, 2007, pages 175--187, 2007."},{"key":"e_1_3_2_1_10_1","first-page":"12","volume-title":"Proceedings of theFirst International Workshop on Security and Resilience of Cyber-Physical Infrastructures (SERECIN)","author":"Green B.","year":"2016","unstructured":"B. Green , S. Frey , A. Rashid , and D. Hutchison . Testbed diversity as a fundamental principle for effective ICS security research . In Proceedings of theFirst International Workshop on Security and Resilience of Cyber-Physical Infrastructures (SERECIN) , pages 12 -- 15 . Lancaster University Technical Report SCC- 2016 -01, 2016. B. Green, S. Frey, A. Rashid, and D. Hutchison. Testbed diversity as a fundamental principle for effective ICS security research. In Proceedings of theFirst International Workshop on Security and Resilience of Cyber-Physical Infrastructures (SERECIN), pages 12--15. Lancaster University Technical Report SCC-2016-01, 2016."},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/2994487.2994498"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/2664243.2664277"},{"key":"e_1_3_2_1_13_1","unstructured":"Infracritical. Project SHINE ndings report. http:\/\/www.slideshare.net\/BobRadvanovsky\/project-shine- ndings-report-dated-1oct2014 2014. Last accessed 12 April 2016.  Infracritical. Project SHINE ndings report. http:\/\/www.slideshare.net\/BobRadvanovsky\/project-shine- ndings-report-dated-1oct2014 2014. Last accessed 12 April 2016."},{"issue":"2","key":"e_1_3_2_1_14_1","first-page":"37","article-title":"Accurate modeling of the siemens S7 SCADA protocol for intrusion detection and digital forensic","volume":"9","author":"Kleinmann A.","year":"2014","unstructured":"A. Kleinmann and A. Wool . Accurate modeling of the siemens S7 SCADA protocol for intrusion detection and digital forensic . JDFSL , 9 ( 2 ): 37 -- 50 , 2014 . A. Kleinmann and A. Wool. Accurate modeling of the siemens S7 SCADA protocol for intrusion detection and digital forensic. JDFSL, 9(2):37--50, 2014.","journal-title":"JDFSL"},{"key":"e_1_3_2_1_15_1","unstructured":"R. Langner. To kill a centrifuge. http:\/\/www.langner.com\/en\/wp-content\/uploads\/2013\/11\/To-kill-a-centrifuge.pdf.  R. Langner. To kill a centrifuge. http:\/\/www.langner.com\/en\/wp-content\/uploads\/2013\/11\/To-kill-a-centrifuge.pdf."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"crossref","unstructured":"R. E. Mahan J. D. Fluckiger S. L. Clements C. Tews J. R. Burnette C. A. Goranson and H. Kirkham. Secure data transfer guidance for industrial control and SCADA systems. Pacific Northwest National Lab (PNNL) Report http:\/\/www.pnnl.gov\/main\/publications\/external\/technical reports\/PNNL-20776.pdf 2011. Last accessed 4 January 2016.  R. E. Mahan J. D. Fluckiger S. L. Clements C. Tews J. R. Burnette C. A. Goranson and H. Kirkham. Secure data transfer guidance for industrial control and SCADA systems. Pacific Northwest National Lab (PNNL) Report http:\/\/www.pnnl.gov\/main\/publications\/external\/technical reports\/PNNL-20776.pdf 2011. Last accessed 4 January 2016.","DOI":"10.2172\/1030885"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.14236\/ewic\/ics-csr2014.10"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382244"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.14236\/ewic\/ics-csr2014.9"},{"key":"e_1_3_2_1_20_1","first-page":"151","volume-title":"PGNET","author":"Paske B.","year":"2014","unstructured":"B. Paske , B. Green , D. Prince , and D. Hutchison . Design and Construction of an Industrial Control System Testbed . In PGNET , pages 151 -- 156 , 2014 . B. Paske, B. Green, D. Prince, and D. Hutchison. Design and Construction of an Industrial Control System Testbed. In PGNET, pages 151--156, 2014."},{"key":"e_1_3_2_1_21_1","volume-title":"https:\/\/ics.sans.org\/media\/E-ISACSANSUkraineDUC5.pdf. {Online: accessed August 1st 2016}","author":"NS.","unstructured":"SA NS. Analysis of the cyber attack on the ukrainian power grid. https:\/\/ics.sans.org\/media\/E-ISACSANSUkraineDUC5.pdf. {Online: accessed August 1st 2016} . SANS. Analysis of the cyber attack on the ukrainian power grid. https:\/\/ics.sans.org\/media\/E-ISACSANSUkraineDUC5.pdf. {Online: accessed August 1st 2016}."},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-20550-2_4"}],"event":{"name":"CCS'16: 2016 ACM SIGSAC Conference on Computer and Communications Security","location":"Vienna Austria","acronym":"CCS'16","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2nd ACM Workshop on Cyber-Physical Systems Security and Privacy"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2994487.2994496","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2994487.2994496","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T03:39:41Z","timestamp":1750217981000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2994487.2994496"}},"subtitle":["Selective Non-Invasive Active Monitoring for ICS Intrusion Detection"],"short-title":[],"issued":{"date-parts":[[2016,10,28]]},"references-count":22,"alternative-id":["10.1145\/2994487.2994496","10.1145\/2994487"],"URL":"https:\/\/doi.org\/10.1145\/2994487.2994496","relation":{},"subject":[],"published":{"date-parts":[[2016,10,28]]},"assertion":[{"value":"2016-10-28","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}