{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,15]],"date-time":"2026-10-15T02:19:19Z","timestamp":1792030759500,"version":"4.4.0"},"publisher-location":"New York, NY, USA","reference-count":23,"publisher":"ACM","license":[{"start":{"date-parts":[[2020,11,9]],"date-time":"2020-11-09T00:00:00Z","timestamp":1604880000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"UK Rail Research and Innovation Network"},{"name":"UK National Cyber Security Centre"},{"name":"Research Institute in Trustworthy Inter-Connected Cyber Physical Systems"},{"DOI":"10.13039\/501100000266","name":"Engineering and Physical Sciences Research Council","doi-asserted-by":"publisher","award":["EP\/N021657\/2 and EP\/S035362\/1"],"award-info":[{"award-number":["EP\/N021657\/2 and EP\/S035362\/1"]}],"id":[{"id":"10.13039\/501100000266","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2020,11,9]]},"DOI":"10.1145\/3411498.3419970","type":"proceedings-article","created":{"date-parts":[[2020,11,4]],"date-time":"2020-11-04T03:24:03Z","timestamp":1604460243000},"page":"49-60","source":"Crossref","is-referenced-by-count":13,"title":["Catch Me If You Can"],"prefix":"10.1145","author":[{"given":"Richard J.","family":"Thomas","sequence":"first","affiliation":[{"name":"University of Birmingham, Birmingham, United Kingdom"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Joseph","family":"Gardiner","sequence":"additional","affiliation":[{"name":"University of Bristol, Bristol, United Kingdom"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Tom","family":"Chothia","sequence":"additional","affiliation":[{"name":"University of Birmingham, Birmingham, United Kingdom"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Emmanouil","family":"Samanis","sequence":"additional","affiliation":[{"name":"University of Bristol, Bristol, United Kingdom"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Joshua","family":"Perrett","sequence":"additional","affiliation":[{"name":"University of Bristol, Bristol, United Kingdom"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Awais","family":"Rashid","sequence":"additional","affiliation":[{"name":"University of Bristol, Bristol, United Kingdom"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2020,11,9]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Kaspersky Lab","author":"Andreeva O.","year":"2016"},{"key":"e_1_3_2_1_2_1","unstructured":"Apple Inc. Apple Security Research Device Program. https:\/\/developer.apple.com\/programs\/security-research-device\/.  Apple Inc. Apple Security Research Device Program. https:\/\/developer.apple.com\/programs\/security-research-device\/."},{"key":"e_1_3_2_1_3_1","first-page":"2017","author":"Dawson T.","year":"2017","journal-title":"Who Were the Leading Vendors of Industrial Controls in"},{"key":"e_1_3_2_1_4_1","unstructured":"Dragos. 2018 Year in Review - Industrial Controls System Vulnerabilities 2018.  Dragos. 2018 Year in Review - Industrial Controls System Vulnerabilities 2018."},{"key":"e_1_3_2_1_5_1","unstructured":"Dragos. 2019 Year in Review - ICS Vulnerabilities 2019.  Dragos. 2019 Year in Review - ICS Vulnerabilities 2019."},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/3338499.3357355"},{"key":"e_1_3_2_1_7_1","unstructured":"General Electric. Achilles Communications Certified Products. https:\/\/www.ge.com\/digital\/applications\/achilles-communications-certified-products.  General Electric. Achilles Communications Certified Products. https:\/\/www.ge.com\/digital\/applications\/achilles-communications-certified-products."},{"key":"e_1_3_2_1_8_1","unstructured":"General Electric. Achilles System Certification (ASC) from GE Digital: FAQ. https:\/\/www.ge.com\/digital\/sites\/default\/files\/download_assets\/Achilles-System-Certification-FAQ.pdf.  General Electric. Achilles System Certification (ASC) from GE Digital: FAQ. https:\/\/www.ge.com\/digital\/sites\/default\/files\/download_assets\/Achilles-System-Certification-FAQ.pdf."},{"key":"e_1_3_2_1_9_1","volume-title":"ID (United States)","author":"Hemsley K. E.","year":"2018"},{"key":"e_1_3_2_1_10_1","first-page":"2016","year":"2016","journal-title":"ICS-CERT Annual Assessment Report FY"},{"key":"e_1_3_2_1_11_1","unstructured":"B. Johnson D. Caban M. Krotofil D. Scali N. Brubaker and C. Glyer. Attackers Deploy New ICS Attack Framework \"TRITON\" and Cause Operational Disruptionto Critical Infrastructure 2017.  B. Johnson D. Caban M. Krotofil D. Scali N. Brubaker and C. Glyer. Attackers Deploy New ICS Attack Framework \"TRITON\" and Cause Operational Disruptionto Critical Infrastructure 2017."},{"key":"e_1_3_2_1_12_1","unstructured":"Kaspersky ICS CERT. Threat Landscape for Industrial Automation Systems 2020.  Kaspersky ICS CERT. Threat Landscape for Industrial Automation Systems 2020."},{"key":"e_1_3_2_1_13_1","unstructured":"National Cyber Security Centre. Cyber Assessment Framework 2020. https:\/\/www.ncsc.gov.uk\/files\/NCSC_CAF_v3.0%20.pdf.  National Cyber Security Centre. Cyber Assessment Framework 2020. https:\/\/www.ncsc.gov.uk\/files\/NCSC_CAF_v3.0%20.pdf."},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/2484313.2484377"},{"key":"e_1_3_2_1_15_1","volume-title":"CRITIS 2019","author":"Rashid A.","year":"2019"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.aci.2017.12.002"},{"key":"e_1_3_2_1_17_1","first-page":"2018","author":"Schwab W.","year":"2018","journal-title":"The State of Industrial Cybersecurity"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1109\/CyberSecPODS.2019.8884963"},{"key":"e_1_3_2_1_19_1","unstructured":"Siemens. Siemens Vulnerability Handling and Disclosure Process. https:\/\/new.siemens.com\/global\/en\/products\/services\/cert\/vulnerability-process.html. Accessed: 2020-07-12.  Siemens. Siemens Vulnerability Handling and Disclosure Process. https:\/\/new.siemens.com\/global\/en\/products\/services\/cert\/vulnerability-process.html. Accessed: 2020-07-12."},{"key":"e_1_3_2_1_20_1","volume-title":"Computer Security","author":"Thomas R. J.","year":"2020"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1109\/ISSRE.2014.32"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1109\/CyberSA49311.2020.9139641"},{"issue":"1","key":"e_1_3_2_1_23_1","first-page":"1","volume":"1","author":"Wang B.","year":"2017","journal-title":"Proceedings of the ACM on Measurement and Analysis of Computing Systems"}],"event":{"name":"CCS '20: 2020 ACM SIGSAC Conference on Computer and Communications Security","location":"Virtual Event USA","acronym":"CCS '20","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2020 Joint Workshop on CPS&IoT Security and Privacy"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3411498.3419970","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3411498.3419970","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T21:31:41Z","timestamp":1750195901000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3411498.3419970"}},"subtitle":["An In-Depth Study of CVE Discovery Time and Inconsistencies for Managing Risks in Critical Infrastructures"],"short-title":[],"issued":{"date-parts":[[2020,11,9]]},"references-count":23,"alternative-id":["10.1145\/3411498.3419970","10.1145\/3411498"],"URL":"https:\/\/doi.org\/10.1145\/3411498.3419970","relation":{},"subject":[],"published":{"date-parts":[[2020,11,9]]}}}