{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,29]],"date-time":"2026-10-29T23:02:36Z","timestamp":1793314956087,"version":"4.5.0"},"publisher-location":"New York, NY, USA","reference-count":49,"publisher":"ACM","license":[{"start":{"date-parts":[[2018,10,15]],"date-time":"2018-10-15T00:00:00Z","timestamp":1539561600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"Swedish Civil Contingencies Agency (MSB)","id":[{"id":"https:\/\/ror.org\/04cz2yk65","id-type":"ROR","asserted-by":"crossref"}]},{"name":"Department of Economic Development and Infrastructures of the Basque Government","award":["KK-2018\/00076"],"award-info":[{"award-number":["KK-2018\/00076"]}],"id":[{"id":"https:\/\/ror.org\/00pz2fp31","id-type":"ROR","asserted-by":"crossref"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2018,10,15]]},"DOI":"10.1145\/3243734.3243781","type":"proceedings-article","created":{"date-parts":[[2018,10,16]],"date-time":"2018-10-16T13:38:33Z","timestamp":1539697113000},"page":"817-831","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":91,"title":["Truth Will Out"],"prefix":"10.1145","author":[{"given":"Wissam","family":"Aoudi","sequence":"first","affiliation":[{"name":"Chalmers University of Technology, Gothenburg, Sweden"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Mikel","family":"Iturbe","sequence":"additional","affiliation":[{"name":"Mondragon University, Arrasate-Mondrag\u00f3n, Spain"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Magnus","family":"Almgren","sequence":"additional","affiliation":[{"name":"Chalmers University of Technology, Gothenburg, Sweden"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2018,10,15]]},"reference":[{"key":"e_1_3_2_2_1_1","volume-title":"Ghost in the PLC Designing an Undetectable Programmable Logic Controller Rootkit via Pin Control Attack. Black Hat Europe","author":"Abbasi Ali","year":"2016"},{"key":"e_1_3_2_2_2_1","volume-title":"Australia. McLean","author":"Abrams Marshall","year":"2008"},{"key":"e_1_3_2_2_3_1","unstructured":"Matthew Allen and Carlo Pisani. 2018. Hacking and Cyber Warfare are Top Humanitarian Concerns. https:\/\/www.swissinfo.ch\/eng\/peter-maurer_hacking-and-cyber-warfare-are-top-humanitarian-concerns\/43847744. Last visited 2018-08-01.  Matthew Allen and Carlo Pisani. 2018. Hacking and Cyber Warfare are Top Humanitarian Concerns. https:\/\/www.swissinfo.ch\/eng\/peter-maurer_hacking-and-cyber-warfare-are-top-humanitarian-concerns\/43847744. Last visited 2018-08-01."},{"key":"e_1_3_2_2_6_1","volume-title":"Time Series Analysis: Forecasting and Control","author":"Box George"},{"key":"e_1_3_2_2_7_1","doi-asserted-by":"publisher","DOI":"10.1016\/0167-2789(86)90031-X"},{"key":"e_1_3_2_2_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/1966913.1966959"},{"key":"e_1_3_2_2_9_1","volume-title":"Challenges for Securing Cyber Physical Systems. In Workshop on Future Directions in Cyber-Physical Systems Security.","author":"C\u00e1rdenas Alvaro","year":"2009"},{"key":"e_1_3_2_2_10_1","volume-title":"Lessons from Stuxnet. Computer","author":"Chen Thomas","year":"2011"},{"key":"e_1_3_2_2_11_1","volume-title":"Using Model-Based Intrusion Detection for SCADA Networks Proceedings of the SCADA security scientific symposium. Citeseer.","author":"Cheung Steven","year":"2007"},{"key":"e_1_3_2_2_12_1","volume-title":"A Plant-Wide Industrial Process Control Problem. Computers & Chemical Engineering","author":"Downs James","year":"1993"},{"key":"e_1_3_2_2_13_1","volume-title":"Singular Spectrum Analysis: A New Tool in Time Series Analysis","author":"Elsner James B"},{"key":"e_1_3_2_2_14_1","volume-title":"White paper","author":"Falliere Nicolas","year":"2011"},{"key":"e_1_3_2_2_15_1","volume-title":"Multi-Level Anomaly Detection in Industrial Control Systems via Package Signatures and LS\u2122 Networks 47th Annual IEEE\/IFIP International Conference on Dependable Systems and Networks (DSN)","author":"Feng Cheng"},{"key":"e_1_3_2_2_16_1","volume-title":"Khurum Nazir Junejo, and Aditya Mathur","author":"Goh Jonathan","year":"2016"},{"key":"e_1_3_2_2_17_1","volume-title":"Basic Singular Spectrum Analysis and Forecasting with R. Computational Statistics & Data Analysis","author":"Golyandina Nina","year":"2014"},{"key":"e_1_3_2_2_18_1","volume-title":"Vladimir Viktorovich Nekrutkin, and Anatoly Alexandrovich Zhigljavsky","author":"Golyandina Nina","year":"2001"},{"key":"e_1_3_2_2_19_1","volume-title":"Singular Spectrum Analysis for Time Series","author":"Golyandina Nina"},{"key":"e_1_3_2_2_20_1","volume-title":"Computer Security","author":"Govil Naman"},{"key":"e_1_3_2_2_21_1","volume-title":"Securing Industrial Control Systems-2017","author":"Gregory-Brown Bengt","year":"2017"},{"key":"e_1_3_2_2_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/2664243.2664277"},{"key":"e_1_3_2_2_23_1","volume-title":"A Brief Introduction to Singular Spectrum Analysis. Optimal Decisions in Statistics and Data Analysis","author":"Hassani Hossein","year":"2010"},{"key":"e_1_3_2_2_24_1","volume-title":"Partially Isometric Matrices. J. Res. Nat. Bur. Standards Sect. B","author":"Hearon John","year":"1967"},{"key":"e_1_3_2_2_25_1","volume-title":"\u201cTRITON","author":"Johnson Blake","year":"2017"},{"key":"e_1_3_2_2_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/2899015.2899016"},{"key":"e_1_3_2_2_27_1","doi-asserted-by":"publisher","DOI":"10.1002\/rob.21513"},{"key":"e_1_3_2_2_28_1","doi-asserted-by":"crossref","unstructured":"Istvan Kiss Bela Genge and Piroska Haller. 2015. A Clustering-Based Approach to Detect Cyber Attacks in Process Control Systems Industrial Informatics (INDIN).  Istvan Kiss Bela Genge and Piroska Haller. 2015. A Clustering-Based Approach to Detect Cyber Attacks in Process Control Systems Industrial Informatics (INDIN).","DOI":"10.1109\/INDIN.2015.7281725"},{"key":"e_1_3_2_2_29_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-41488-6_12"},{"key":"e_1_3_2_2_30_1","volume-title":"Rocking the Pocket Book: Hacking Chemical Plants DefCon Conference, DEFCON.","author":"Krotofil Marina","year":"2015"},{"key":"e_1_3_2_2_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/2714576.2714599"},{"key":"e_1_3_2_2_32_1","volume-title":"Self-Optimizing Control of a Large-Scale Plant: The Tennessee Eastman Process. Industrial & Engineering Chemistry Research","author":"Larsson Truls","year":"2001"},{"key":"e_1_3_2_2_35_1","doi-asserted-by":"publisher","DOI":"10.1145\/1952982.1952995"},{"key":"e_1_3_2_2_36_1","volume-title":"SWaT: A Water Treatment Testbed for Research and Training on ICS Security 2016 International Workshop on Cyber-physical Systems for Smart Water Networks (CySWater).","author":"Mathur Aditya","year":"2016"},{"key":"e_1_3_2_2_37_1","volume-title":"A Plant-Wide Industrial Process Control Security Problem International Conference on Critical Infrastructure Protection","author":"McEvoy Thomas"},{"key":"e_1_3_2_2_38_1","doi-asserted-by":"publisher","DOI":"10.1109\/TAC.2015.2498708"},{"key":"e_1_3_2_2_39_1","volume-title":"An Algorithm Based on Singular Spectrum Analysis for Change-Point Detection. Communications in Statistics-Simulation and Computation","author":"Moskvina Valentina","year":"2003"},{"key":"e_1_3_2_2_40_1","volume-title":"Lp-Norms in One-Class Classification for Intrusion Detection in SCADA Systems","author":"Nader Patric","year":"2014"},{"key":"e_1_3_2_2_41_1","volume-title":"The Impact of Dragonfly Malware on Industrial Control Systems","author":"Nelson Nell","year":"2016"},{"key":"e_1_3_2_2_42_1","doi-asserted-by":"publisher","DOI":"10.1109\/TSG.2015.2409775"},{"key":"e_1_3_2_2_43_1","doi-asserted-by":"publisher","DOI":"10.1016\/S1389-1286(99)00112-7"},{"key":"e_1_3_2_2_44_1","unstructured":"Pavel Polityuk Oleg Vukmanovic and Stephen Jewkes. 2017. Ukraine's Power Outage was a Cyber Attack: Ukrenergo. https:\/\/www.reuters.com\/article\/us-ukraine-cyber-attack-energy\/ukraines-power-outage-was-a-cyber-attack-ukrenergo-idUSKBN1521BA. Last visited 2018-08-01.  Pavel Polityuk Oleg Vukmanovic and Stephen Jewkes. 2017. Ukraine's Power Outage was a Cyber Attack: Ukrenergo. https:\/\/www.reuters.com\/article\/us-ukraine-cyber-attack-energy\/ukraines-power-outage-was-a-cyber-attack-ukrenergo-idUSKBN1521BA. Last visited 2018-08-01."},{"key":"e_1_3_2_2_45_1","volume-title":"Decentralized Control of the Tennessee Eastman Challenge Process. Journal of Process Control","author":"Ricker Lawrence","year":"1996"},{"key":"e_1_3_2_2_46_1","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813679"},{"key":"e_1_3_2_2_47_1","volume-title":"PLC-Blaster: A Worm Living Solely in the PLC. Black Hat Asia","author":"Spenneberg Ralf","year":"2016"},{"key":"e_1_3_2_2_48_1","volume-title":"Guide to Industrial Control Systems (ICS) Security. NIST special publication","author":"Stouffer Keith","year":"2011"},{"key":"e_1_3_2_2_49_1","volume-title":"Introduction to Linear Algebra","author":"Strang Gilbert"},{"key":"e_1_3_2_2_50_1","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978388"},{"key":"e_1_3_2_2_52_1","volume-title":"Singular Spectrum Analysis in Nonlinear Dynamics, with Applications to Paleoclimatic Time Series. Physica D: Nonlinear Phenomena","author":"Vautard Robert","year":"1989"},{"key":"e_1_3_2_2_53_1","volume-title":"Suspected Russia-Backed Hackers Target Baltic Energy Networks","author":"Vukmanovic Oleg"},{"key":"e_1_3_2_2_54_1","volume-title":"NIPAD: A Non-Invasive Power-Based Anomaly Detection Scheme for Programmable Logic Controllers. Frontiers of Information Technology & Electronic Engineering","year":"2017"}],"event":{"name":"CCS '18: 2018 ACM SIGSAC Conference on Computer and Communications Security","location":"Toronto Canada","acronym":"CCS '18","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3243734.3243781","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3243734.3243781","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T22:08:18Z","timestamp":1750198098000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3243734.3243781"}},"subtitle":["Departure-Based Process-Level Detection of Stealthy Attacks on Control Systems"],"short-title":[],"issued":{"date-parts":[[2018,10,15]]},"references-count":49,"alternative-id":["10.1145\/3243734.3243781","10.1145\/3243734"],"URL":"https:\/\/doi.org\/10.1145\/3243734.3243781","relation":{},"subject":[],"published":{"date-parts":[[2018,10,15]]},"assertion":[{"value":"2018-10-15","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}