{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,24]],"date-time":"2026-03-24T16:26:42Z","timestamp":1774369602857,"version":"3.50.1"},"publisher-location":"New York, NY, USA","reference-count":35,"publisher":"ACM","license":[{"start":{"date-parts":[[2021,11,15]],"date-time":"2021-11-15T00:00:00Z","timestamp":1636934400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"National Research Foundation Prime Minister's Office Singapore"},{"name":"SUTD Start-up Research Grant","award":["SRG ISTD 2020 157"],"award-info":[{"award-number":["SRG ISTD 2020 157"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2021,11,15]]},"DOI":"10.1145\/3462633.3483983","type":"proceedings-article","created":{"date-parts":[[2021,11,13]],"date-time":"2021-11-13T15:18:42Z","timestamp":1636816722000},"page":"3-14","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":6,"title":["vBump"],"prefix":"10.1145","author":[{"given":"Nils Ole","family":"Tippenhauer","sequence":"first","affiliation":[{"name":"CISPA Helmholtz Center for Information Security, Saarbr\u00fccken, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Binbin","family":"Chen","sequence":"additional","affiliation":[{"name":"Singapore University of Technology and Design, Singapore, Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Daisuke","family":"Mashima","sequence":"additional","affiliation":[{"name":"Advanced Digital Sciences Center, Singapore, Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"David M.","family":"Nicol","sequence":"additional","affiliation":[{"name":"University of Illinois at Urbana Champaign, Urbana Champaign, IL, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2021,11,15]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"utility control rooms, homeland security officials say","year":"2017","unstructured":"\"Russian hackers reach u.s. utility control rooms, homeland security officials say ,\" 2017 . [Online]. Available: https:\/\/www.wsj.com\/articles\/russian-hackers-reach-u-s-utility-control-rooms-homeland-security-officials-say-1532388110 \"Russian hackers reach u.s. utility control rooms, homeland security officials say,\" 2017. [Online]. Available: https:\/\/www.wsj.com\/articles\/russian-hackers-reach-u-s-utility-control-rooms-homeland-security-officials-say-1532388110"},{"key":"e_1_3_2_1_2_1","first-page":"268","volume-title":"May 2017","author":"Quarta D.","year":"2017","unstructured":"D. Quarta , M. Pogliani , M. Polino , F. Maggi , A. M. Zanchettin , and S. Zanero , \" An experimental security analysis of an industrial robot controller,\" in Proceedings of the IEEE Symposium on Security and Privacy (SP), vol. 00 , May 2017 , pp. 268 -- 286 . [Online]. Available : doi.ieeecomputersociety.org\/10.1109\/SP. 2017 .20 D. Quarta, M. Pogliani, M. Polino, F. Maggi, A. M. Zanchettin, and S. Zanero, \"An experimental security analysis of an industrial robot controller,\" in Proceedings of the IEEE Symposium on Security and Privacy (SP), vol. 00, May 2017, pp. 268--286. [Online]. Available: doi.ieeecomputersociety.org\/10.1109\/SP.2017.20"},{"key":"e_1_3_2_1_3_1","volume-title":"Rfc 4301: Security architecture for the internet protocol","author":"Kent S.","year":"2005","unstructured":"S. Kent and K. Seo , \" Rfc 4301: Security architecture for the internet protocol ,\" 2005 . S. Kent and K. Seo, \"Rfc 4301: Security architecture for the internet protocol,\" 2005."},{"issue":"5","key":"e_1_3_2_1_4_1","first-page":"6","article-title":"Security aspects in ipv6 networks--implementation and testing","volume":"33","author":"\u017dagar D.","year":"2007","unstructured":"D. \u017dagar , K. Grgi\u0107 , and S. Rimac-Drlje , \" Security aspects in ipv6 networks--implementation and testing ,\" Computers & Electrical Engineering , vol. 33 , no. 5 -- 6 , pp. 425--437, 2007 . D. \u017dagar, K. Grgi\u0107, and S. Rimac-Drlje, \"Security aspects in ipv6 networks--implementation and testing,\" Computers & Electrical Engineering, vol. 33, no. 5--6, pp. 425--437, 2007.","journal-title":"Computers & Electrical Engineering"},{"key":"e_1_3_2_1_5_1","first-page":"389","article-title":"An approach for measuring ip security performance in a distributed environment","author":"Chappell B. L.","year":"1999","unstructured":"B. L. Chappell , D. T. Marlow , P. M. Irey , and K. O'Donoghue , \" An approach for measuring ip security performance in a distributed environment ,\" in Proceedings of the Workshops Held in Conjunction with the Parallel Processing Symposium and Symposium on Parallel and Distributed Processing. Springer Berlin Heidelberg , 1999 , pp. 389 -- 394 . B. L. Chappell, D. T. Marlow, P. M. Irey, and K. O'Donoghue, \"An approach for measuring ip security performance in a distributed environment,\" in Proceedings of the Workshops Held in Conjunction with the Parallel Processing Symposium and Symposium on Parallel and Distributed Processing. Springer Berlin Heidelberg, 1999, pp. 389--394.","journal-title":"Springer Berlin Heidelberg"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/TSG.2017.2744802"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1109\/PSCE.2006.296392"},{"key":"e_1_3_2_1_8_1","unstructured":"IEEE Power and Energy Society \"IEEE Standard Communication Delivery Time Performance Requirements for Electric Power Substation Automation \" 2004.  IEEE Power and Energy Society \"IEEE Standard Communication Delivery Time Performance Requirements for Electric Power Substation Automation \" 2004."},{"key":"e_1_3_2_1_9_1","first-page":"261","volume-title":"Cyber-Physical Security Testbed for Substations in a Power Grid","author":"Hong J.","year":"2015","unstructured":"J. Hong , Y. Chen , C.-C. Liu , and M. Govindarasu , Cyber-Physical Security Testbed for Substations in a Power Grid . Springer Berlin Heidelberg , 2015 , pp. 261 -- 301 . J. Hong, Y. Chen, C.-C. Liu, and M. Govindarasu, Cyber-Physical Security Testbed for Substations in a Power Grid. Springer Berlin Heidelberg, 2015, pp. 261--301."},{"key":"e_1_3_2_1_10_1","unstructured":"IEC TC57 \"IEC 61850-90-2 TR: Communication networks and systems for power utility automation -- part 90-2: Using iec 61850 for the communication between substations and control centres \" International Electro technical Commission Std 2015.  IEC TC57 \"IEC 61850-90-2 TR: Communication networks and systems for power utility automation -- part 90-2: Using iec 61850 for the communication between substations and control centres \" International Electro technical Commission Std 2015."},{"key":"e_1_3_2_1_11_1","first-page":"89","volume-title":"IEEE","author":"Mashima D.","year":"2017","unstructured":"D. Mashima , B. Chen , P. Gunathilaka , and E. L. Tjiong , \" Towards a grid-wide, high-fidelity electrical substation honeynet,\" in Proceedings of the Conference on Smart Grid Communications (SmartGridComm) . IEEE , 2017 , pp. 89 -- 95 . D. Mashima, B. Chen, P. Gunathilaka, and E. L. Tjiong, \"Towards a grid-wide, high-fidelity electrical substation honeynet,\" in Proceedings of the Conference on Smart Grid Communications (SmartGridComm). IEEE, 2017, pp. 89--95."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.3390\/electronics5040085"},{"key":"e_1_3_2_1_13_1","volume-title":"IEEE","author":"Biswas P. P.","year":"2019","unstructured":"P. P. Biswas , H. C. Tan , Q. Zhu , Y. Li , D. Mashima , and B. Chen , \" A synthesized dataset for cybersecurity study of iec 61850 based substation,\" in Proceedings of Conference on Communications, Control, and Computing Technologies for Smart Grids (SmartGridComm) . IEEE , 2019 . P. P. Biswas, H. C. Tan, Q. Zhu, Y. Li, D. Mashima, and B. Chen, \"A synthesized dataset for cybersecurity study of iec 61850 based substation,\" in Proceedings of Conference on Communications, Control, and Computing Technologies for Smart Grids (SmartGridComm). IEEE, 2019."},{"key":"e_1_3_2_1_14_1","volume-title":"Aug.","author":"Cheminod M.","year":"2016","unstructured":"M. Cheminod , L. Durante , M. Maggiora , A. Valenzano , and C. Zunino , \" Performance of firewalls for industrial applications,\" in Proceedings of the Symposium for ICS & SCADA Cyber Security Research (ICS-CSR) , Aug. 2016 . M. Cheminod, L. Durante, M. Maggiora, A. Valenzano, and C. Zunino, \"Performance of firewalls for industrial applications,\" in Proceedings of the Symposium for ICS & SCADA Cyber Security Research (ICS-CSR), Aug. 2016."},{"key":"e_1_3_2_1_15_1","unstructured":"C. Jaggi \"Layer 2 encryptors for metro and carrier ethernet wans and mans \" 2017.  C. Jaggi \"Layer 2 encryptors for metro and carrier ethernet wans and mans \" 2017."},{"key":"e_1_3_2_1_16_1","volume-title":"IEEE","author":"Mashima D.","year":"2018","unstructured":"D. Mashima , B. Chen , T. Zhou , R. Rajendran , and B. Sikdar , \" Securing substations through command authentication using on-the-fly simulation of power system dynamics,\" in Proceedings of the Conference on Smart Grid Communications (SmartGridComm) . IEEE , 2018 . D. Mashima, B. Chen, T. Zhou, R. Rajendran, and B. Sikdar, \"Securing substations through command authentication using on-the-fly simulation of power system dynamics,\" in Proceedings of the Conference on Smart Grid Communications (SmartGridComm). IEEE, 2018."},{"key":"e_1_3_2_1_17_1","first-page":"1","article-title":"F-pro: a fast and flexible provenance-aware message authentication scheme for smart grid,\" in 2019 IEEE International Conference on Communications, Control, and Computing Technologies for Smart Grids (SmartGridComm)","author":"Esiner E.","year":"2019","unstructured":"E. Esiner , D. Mashima , B. Chen , Z. Kalbarczyk , and D. Nicol , \" F-pro: a fast and flexible provenance-aware message authentication scheme for smart grid,\" in 2019 IEEE International Conference on Communications, Control, and Computing Technologies for Smart Grids (SmartGridComm) . IEEE , 2019 , pp. 1 -- 7 . E. Esiner, D. Mashima, B. Chen, Z. Kalbarczyk, and D. Nicol, \"F-pro: a fast and flexible provenance-aware message authentication scheme for smart grid,\" in 2019 IEEE International Conference on Communications, Control, and Computing Technologies for Smart Grids (SmartGridComm). IEEE, 2019, pp. 1--7.","journal-title":"IEEE"},{"key":"e_1_3_2_1_18_1","volume-title":"IEC 62351 security standards for the power system information infrastructure,\" White Paper","author":"Cleveland F.","year":"2012","unstructured":"F. Cleveland , \" IEC TC57 WG15 : IEC 62351 security standards for the power system information infrastructure,\" White Paper , 2012 . F. Cleveland, \"IEC TC57 WG15: IEC 62351 security standards for the power system information infrastructure,\" White Paper, 2012."},{"key":"e_1_3_2_1_19_1","volume-title":"Available: https:\/\/www.us-cert.gov\/ncas\/alerts\/TA17-163A","year":"2017","unstructured":"\"Crashoverride malware,\" [Online]. Available: https:\/\/www.us-cert.gov\/ncas\/alerts\/TA17-163A , 2017 , ( Date last accessed on Feb. 4, 2019). \"Crashoverride malware,\" [Online]. Available: https:\/\/www.us-cert.gov\/ncas\/alerts\/TA17-163A, 2017, (Date last accessed on Feb. 4, 2019)."},{"key":"e_1_3_2_1_20_1","volume-title":"January","author":"Urbina D.","year":"2016","unstructured":"D. Urbina , J. Giraldo , N. O. Tippenhauer , and A. C\u00e1rdenas , \" Attacking fieldbus communications in ICS: Applications to the SWaT testbed,\" in Proceedings of Singapore Cyber Security Conference (SG-CRC) , January 2016 . D. Urbina, J. Giraldo, N. O. Tippenhauer, and A. C\u00e1rdenas, \"Attacking fieldbus communications in ICS: Applications to the SWaT testbed,\" in Proceedings of Singapore Cyber Security Conference (SG-CRC), January 2016."},{"key":"e_1_3_2_1_21_1","unstructured":"R. Farrow \"VLAN insecurity Mar. 2003. [Online]. Available: http:\/\/rikfarrow.com\/Network\/net0103.html  R. Farrow \"VLAN insecurity Mar. 2003. [Online]. Available: http:\/\/rikfarrow.com\/Network\/net0103.html"},{"key":"e_1_3_2_1_22_1","volume-title":"Fun with ethernet switches,\" Blackhat [Online Document]","author":"Convery S.","year":"2002","unstructured":"S. Convery , \"Hacking layer 2 : Fun with ethernet switches,\" Blackhat [Online Document] , 2002 . S. Convery, \"Hacking layer 2: Fun with ethernet switches,\" Blackhat [Online Document], 2002."},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1109\/SURV.2012.121112.00190"},{"key":"e_1_3_2_1_24_1","first-page":"466","volume-title":"2015 IEEE International Conference on. IEEE","author":"Carmo U.","year":"2015","unstructured":"U. Carmo , D. H. Sadok , and J. Kelner , \" Iec 61850 traffic analysis in electrical automation networks,\" in Smart Grid Communications (SmartGridComm) , 2015 IEEE International Conference on. IEEE , 2015 , pp. 466 -- 471 . U. Carmo, D. H. Sadok, and J. Kelner, \"Iec 61850 traffic analysis in electrical automation networks,\" in Smart Grid Communications (SmartGridComm), 2015 IEEE International Conference on. IEEE, 2015, pp. 466--471."},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1504\/IJSN.2011.039632"},{"key":"e_1_3_2_1_26_1","volume-title":"a filtering tool for a linux-based bridging firewall","year":"2018","unstructured":"Netfilter Coreteam, \"Ebtables : a filtering tool for a linux-based bridging firewall ,\" 2018 . [Online]. Available: http:\/\/ebtables.netfilter.org Netfilter Coreteam, \"Ebtables: a filtering tool for a linux-based bridging firewall,\" 2018. [Online]. Available: http:\/\/ebtables.netfilter.org"},{"key":"e_1_3_2_1_27_1","volume-title":"Shelar et al., \"The design and implementation of open vswitch,\" in Proceedings of the USENIX Symposium on Networked Systems Design and Implementation (NSDI)","author":"Pfaff B.","year":"2015","unstructured":"B. Pfaff , J. Pettit , T. Koponen , E. J. Jackson , A. Zhou , J. Rajahalme , J. Gross , A. Wang , J. Stringer , P. Shelar et al., \"The design and implementation of open vswitch,\" in Proceedings of the USENIX Symposium on Networked Systems Design and Implementation (NSDI) , 2015 . B. Pfaff, J. Pettit, T. Koponen, E. J. Jackson, A. Zhou, J. Rajahalme, J. Gross, A. Wang, J. Stringer, P. Shelar et al., \"The design and implementation of open vswitch,\" in Proceedings of the USENIX Symposium on Networked Systems Design and Implementation (NSDI), 2015."},{"key":"e_1_3_2_1_28_1","unstructured":"J. McCauley \"The pox network software platform \" 2015. [Online]. Available: https:\/\/github.com\/noxrepo\/pox  J. McCauley \"The pox network software platform \" 2015. [Online]. Available: https:\/\/github.com\/noxrepo\/pox"},{"key":"e_1_3_2_1_29_1","unstructured":"\"GOOSE protocol parser for Zeek IDS \" 2020. [Online]. Available: https:\/\/github.com\/smartgridadsc\/Goose-protocol-parser-for-Zeek  \"GOOSE protocol parser for Zeek IDS \" 2020. [Online]. Available: https:\/\/github.com\/smartgridadsc\/Goose-protocol-parser-for-Zeek"},{"key":"e_1_3_2_1_31_1","volume-title":"Method, apparatus and system for inserting a vlan tag into a captured data packet","author":"Breslin T. M.","year":"2014","unstructured":"T. M. Breslin , D. Kucharczyk , and J. A. Hinshaw , \" Method, apparatus and system for inserting a vlan tag into a captured data packet ,\" Sep. 9 2014 , uS Patent 8,832,222. T. M. Breslin, D. Kucharczyk, and J. A. Hinshaw, \"Method, apparatus and system for inserting a vlan tag into a captured data packet,\" Sep. 9 2014, uS Patent 8,832,222."},{"key":"e_1_3_2_1_32_1","volume-title":"Systems and methods for performing network service insertion","author":"Naiksatam S. A.","year":"2017","unstructured":"S. A. Naiksatam , K. Jiang , G. M. Maier , S. Ramasubramanian , S. D. Modi , R. W. Sherwood , M. S. Dhami , and M. Cohen , \" Systems and methods for performing network service insertion ,\" Jan. 17 2017 , uS Patent 9,548,896. S. A. Naiksatam, K. Jiang, G. M. Maier, S. Ramasubramanian, S. D. Modi, R. W. Sherwood, M. S. Dhami, and M. Cohen, \"Systems and methods for performing network service insertion,\" Jan. 17 2017, uS Patent 9,548,896."},{"key":"e_1_3_2_1_33_1","first-page":"17","volume-title":"ACM","author":"Li H.","year":"2018","unstructured":"H. Li , H. Hu , G. Gu , G.-J. Ahn , and F. Zhang , \" vnids: Towards elastic security with safe and efficient virtualization of network intrusion detection systems,\" in Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security . ACM , 2018 , pp. 17 -- 34 . H. Li, H. Hu, G. Gu, G.-J. Ahn, and F. Zhang, \"vnids: Towards elastic security with safe and efficient virtualization of network intrusion detection systems,\" in Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security. ACM, 2018, pp. 17--34."},{"key":"e_1_3_2_1_34_1","first-page":"817","article-title":"Bohatei: Flexible and elastic ddos defense","author":"Fayaz S. K.","year":"2015","unstructured":"S. K. Fayaz , Y. Tobioka , V. Sekar , and M. Bailey , \" Bohatei: Flexible and elastic ddos defense .\" in USENIX Security Symposium , 2015 , pp. 817 -- 832 . S. K. Fayaz, Y. Tobioka, V. Sekar, and M. Bailey, \"Bohatei: Flexible and elastic ddos defense.\" in USENIX Security Symposium, 2015, pp. 817--832.","journal-title":"USENIX Security Symposium"},{"key":"e_1_3_2_1_35_1","first-page":"231","volume-title":"IEEE","author":"Kumar R.","year":"2017","unstructured":"R. Kumar , M. Hasan , S. Padhy , K. Evchenko , L. Piramanayagam , S. Mohan , and R. B. Bobba , \" End-to-end network delay guarantees for real-time systems using sdn,\" in Proceedings of the Real-Time Systems Symposium (RTSS) . IEEE , 2017 , pp. 231 -- 242 . R. Kumar, M. Hasan, S. Padhy, K. Evchenko, L. Piramanayagam, S. Mohan, and R. B. Bobba, \"End-to-end network delay guarantees for real-time systems using sdn,\" in Proceedings of the Real-Time Systems Symposium (RTSS). IEEE, 2017, pp. 231--242."},{"key":"e_1_3_2_1_36_1","first-page":"61","volume-title":"ACM","author":"Dong X.","year":"2015","unstructured":"X. Dong , H. Lin , R. Tan , R. K. Iyer , and Z. Kalbarczyk , \" Software-defined networking for smart grid resilience: Opportunities and challenges,\" in Proceedings of the ACM Workshop on Cyber-Physical System Security (CPSS) . ACM , 2015 , pp. 61 -- 68 . X. Dong, H. Lin, R. Tan, R. K. Iyer, and Z. Kalbarczyk, \"Software-defined networking for smart grid resilience: Opportunities and challenges,\" in Proceedings of the ACM Workshop on Cyber-Physical System Security (CPSS). ACM, 2015, pp. 61--68."}],"event":{"name":"CCS '21: 2021 ACM SIGSAC Conference on Computer and Communications Security","location":"Virtual Event Republic of Korea","acronym":"CCS '21","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2th Workshop on CPS&IoT Security and Privacy"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3462633.3483983","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3462633.3483983","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T20:19:02Z","timestamp":1750191542000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3462633.3483983"}},"subtitle":["Securing Ethernet-based Industrial Control System Networks with VLAN-based Traffic Aggregation"],"short-title":[],"issued":{"date-parts":[[2021,11,15]]},"references-count":35,"alternative-id":["10.1145\/3462633.3483983","10.1145\/3462633"],"URL":"https:\/\/doi.org\/10.1145\/3462633.3483983","relation":{},"subject":[],"published":{"date-parts":[[2021,11,15]]},"assertion":[{"value":"2021-11-15","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}