{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,16]],"date-time":"2026-05-16T10:59:36Z","timestamp":1778929176569,"version":"3.51.4"},"publisher-location":"New York, NY, USA","reference-count":16,"publisher":"ACM","license":[{"start":{"date-parts":[[2018,5,22]],"date-time":"2018-05-22T00:00:00Z","timestamp":1526947200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/100009527","name":"Myndigheten f\u00f6r Samh\u00e4llsskydd och Beredskap","doi-asserted-by":"publisher","id":[{"id":"10.13039\/100009527","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2018,5,22]]},"DOI":"10.1145\/3198458.3198460","type":"proceedings-article","created":{"date-parts":[[2018,5,25]],"date-time":"2018-05-25T12:39:28Z","timestamp":1527251968000},"page":"51-60","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":31,"title":["Understanding IEC-60870-5-104 Traffic Patterns in SCADA Networks"],"prefix":"10.1145","author":[{"given":"Chih-Yuan","family":"Lin","sequence":"first","affiliation":[{"name":"Link\u00f6ping University, Link\u00f6ping, Sweden"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Simin","family":"Nadjm-Tehrani","sequence":"additional","affiliation":[{"name":"Link\u00f6ping University, Link\u00f6ping, Sweden"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2018,5,22]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"{n. d.}. Distributed Network Protocol 3.0. ({n. d.}). https:\/\/www.dnp.org\/pages\/ aboutdefault.aspx  {n. d.}. Distributed Network Protocol 3.0. ({n. d.}). https:\/\/www.dnp.org\/pages\/ aboutdefault.aspx"},{"key":"e_1_3_2_1_2_1","unstructured":"{n. d.}. IEC 60870--5--104. ({n. d.}). https:\/\/webstore.iec.ch\/publication\/25035  {n. d.}. IEC 60870--5--104. ({n. d.}). https:\/\/webstore.iec.ch\/publication\/25035"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-28537-0_13"},{"key":"e_1_3_2_1_4_1","volume-title":"IEEE Network Operations and Management Symposium (NOMS).","author":"Regis Barbosa Rafael Ramos","year":"2012","unstructured":"Rafael Ramos Regis Barbosa , Ramin Sadre , and Aiko Pras . 2012 . A first look into SCADA network traffic . In IEEE Network Operations and Management Symposium (NOMS). Rafael Ramos Regis Barbosa, Ramin Sadre, and Aiko Pras. 2012. A first look into SCADA network traffic. In IEEE Network Operations and Management Symposium (NOMS)."},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijcip.2016.02.004"},{"key":"e_1_3_2_1_6_1","volume-title":"Duqu: A Stuxnet-like malware found in the wild. Technical Report. Laboratory of Cryptography and System Security (CrySyS Lab)","author":"Bencs\u00e1th Boldizs\u00e1r","year":"2011","unstructured":"Boldizs\u00e1r Bencs\u00e1th , G\u00e1bor P\u00e9k , Levente Butty\u00e1n , and M\u00e1rk F\u00e9legyh\u00e1zi . 2011 . Duqu: A Stuxnet-like malware found in the wild. Technical Report. Laboratory of Cryptography and System Security (CrySyS Lab) , Budapest University of Technology and Economics Department of Telecommunications . Boldizs\u00e1r Bencs\u00e1th, G\u00e1bor P\u00e9k, Levente Butty\u00e1n, and M\u00e1rk F\u00e9legyh\u00e1zi. 2011. Duqu: A Stuxnet-like malware found in the wild. Technical Report. Laboratory of Cryptography and System Security (CrySyS Lab), Budapest University of Technology and Economics Department of Telecommunications."},{"key":"e_1_3_2_1_7_1","unstructured":"Nicolas Falliere Liam O Murchu and Eric Chien. 2011. W32.Stuxnet Dossier. Technical Report. Symantec Mountain View.  Nicolas Falliere Liam O Murchu and Eric Chien. 2011. W32.Stuxnet Dossier. Technical Report. Symantec Mountain View."},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/2667190.2667196"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/3084456"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijcip.2013.05.001"},{"key":"e_1_3_2_1_11_1","volume-title":"Smart Grid Communications (SmartGridComm), 2014 IEEE International Conference on.","author":"Jung Sang Shin","year":"2015","unstructured":"Sang Shin Jung , David Formby , Carson Day , and Raheem Beyah . 2015 . A first look at machine-to-machine power grid network traffic . In Smart Grid Communications (SmartGridComm), 2014 IEEE International Conference on. Sang Shin Jung, David Formby, Carson Day, and Raheem Beyah. 2015. A first look at machine-to-machine power grid network traffic. In Smart Grid Communications (SmartGridComm), 2014 IEEE International Conference on."},{"key":"e_1_3_2_1_12_1","article-title":"Accurate Modeling of the Siemens S7 SCADA Protocol for Intrusion Detection and Digital Forensic","volume":"9","author":"Kleinmann Amit","year":"2014","unstructured":"Amit Kleinmann and Avishai Wool . 2014 . Accurate Modeling of the Siemens S7 SCADA Protocol for Intrusion Detection and Digital Forensic . The Journal of Digital Forensics, Security and Law 9 , 2 (2014). Amit Kleinmann and Avishai Wool. 2014. Accurate Modeling of the Siemens S7 SCADA Protocol for Intrusion Detection and Digital Forensic. The Journal of Digital Forensics, Security and Law 9, 2 (2014).","journal-title":"The Journal of Digital Forensics, Security and Law"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-33331-1_11"},{"key":"e_1_3_2_1_14_1","volume-title":"Network Traffic Analysis and SCADA Security. Handbook of Information and Communication Security","author":"Mahmood Abdun Naser","year":"2010","unstructured":"Abdun Naser Mahmood , Christopher Leckie , Jiankun Hu , Zahir Tari , and Mohammed Atiquzzaman . 2010. Network Traffic Analysis and SCADA Security. Handbook of Information and Communication Security ( 2010 ), 383--405. Abdun Naser Mahmood, Christopher Leckie, Jiankun Hu, Zahir Tari, and Mohammed Atiquzzaman. 2010. Network Traffic Analysis and SCADA Security. Handbook of Information and Communication Security (2010), 383--405."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/2899015.2899028"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1109\/THS.2009.5168010"}],"event":{"name":"ASIA CCS '18: ACM Asia Conference on Computer and Communications Security","location":"Incheon Republic of Korea","acronym":"ASIA CCS '18","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 4th ACM Workshop on Cyber-Physical System Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3198458.3198460","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3198458.3198460","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T17:49:24Z","timestamp":1750268964000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3198458.3198460"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018,5,22]]},"references-count":16,"alternative-id":["10.1145\/3198458.3198460","10.1145\/3198458"],"URL":"https:\/\/doi.org\/10.1145\/3198458.3198460","relation":{},"subject":[],"published":{"date-parts":[[2018,5,22]]},"assertion":[{"value":"2018-05-22","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}