{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T04:12:48Z","timestamp":1750219968847,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":19,"publisher":"ACM","license":[{"start":{"date-parts":[[2023,8,29]],"date-time":"2023-08-29T00:00:00Z","timestamp":1693267200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2023,8,29]]},"DOI":"10.1145\/3600160.3605059","type":"proceedings-article","created":{"date-parts":[[2023,8,9]],"date-time":"2023-08-09T22:54:41Z","timestamp":1691621681000},"page":"1-9","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":1,"title":["A Forensic I\/O Recorder for Industrial Control Systems Using PLCs and OPC UA"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0000-2046-4871","authenticated-orcid":false,"given":"Alexios","family":"Karagiozidis","sequence":"first","affiliation":[{"name":"rt-solutions.de GmbH, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0003-3799-4010","authenticated-orcid":false,"given":"Martin","family":"Gergeleit","sequence":"additional","affiliation":[{"name":"University of Applied Sciences RheinMain, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2023,8,29]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"New Delhi","author":"Chan Chun-Fai","year":"2018","unstructured":"Chun-Fai Chan, K.P. Chow, Siu-Ming Yiu, and Ken Yau. 2018. Enhancing the Security and Forensic Capabilities of Programmable Logic Controllers: 14th IFIP WG 11.9 International Conference, New Delhi, India, January 3-5, 2018, Revised Selected Papers. 351\u2013367."},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.2172\/944209"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.47277\/IJCEIT\/12(5)1"},{"key":"e_1_3_2_1_5_1","unstructured":"Bundesamt f\u00fcr Sicherheit in\u00a0der Informationstechnik\u00a0(BSI). 2011. Leitfaden IT-Forensik. Technical Report."},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"crossref","unstructured":"Luis Garcia Ferdinand Brasser Mehmet Cintuglu Ahmad-Reza Sadeghi Osama Mohammed and Saman Zonouz. 2017. Hey My Malware Knows Physics! Attacking PLCs with Physical Model Aware Rootkit.","DOI":"10.14722\/ndss.2017.23313"},{"volume-title":"Programmable controllers - Part 3: Programming languages. Standard","author":"IEC","key":"e_1_3_2_1_7_1","unstructured":"IEC 61131-1:2003 2003. Programmable controllers - Part 3: Programming languages. Standard. International Electrotechnical Commission, Geneva, CH."},{"volume-title":"Programmable controllers - Part 3: Programming languages. Standard","author":"IEC","key":"e_1_3_2_1_8_1","unstructured":"IEC 61131-3:2013 2000. Programmable controllers - Part 3: Programming languages. Standard. International Electrotechnical Commission, Geneva, CH."},{"key":"e_1_3_2_1_9_1","volume-title":"Runtime-Monitoring for Industrial Control Systems. Electronics 4 (12","author":"Janicke Helge","year":"2015","unstructured":"Helge Janicke, Andrew Nicholson, Stuart Webber, and Antonio Cau. 2015. Runtime-Monitoring for Industrial Control Systems. Electronics 4 (12 2015), 995\u20131017."},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"crossref","unstructured":"Alexios Karagiozidis and Martin Gergeleit. 2022. An OT Forensic Model Based on Established IT Forensics Using IIRA. 1\u20138.","DOI":"10.1109\/ETFA52439.2022.9921588"},{"key":"e_1_3_2_1_12_1","volume-title":"Stealthy Deception Attacks Against SCADA Systems. (06","author":"Kleinmann Amit","year":"2017","unstructured":"Amit Kleinmann, Ori Amichay, Avishai Wool, David Tenenbaum, Ofer Bar, and Leonid Lev. 2017. Stealthy Deception Attacks Against SCADA Systems. (06 2017)."},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1109\/ETFA52439.2022.9921547"},{"key":"e_1_3_2_1_14_1","volume-title":"Understanding Digital Signal Processing","author":"Lyons Richard","unstructured":"Richard Lyons. 2011. Understanding Digital Signal Processing (3rd Edition).","edition":"3"},{"key":"e_1_3_2_1_15_1","unstructured":"OPC 10000-3 2022. Unified Architecture Part 3: Address Space Model (OPC 10000-3)."},{"key":"e_1_3_2_1_16_1","unstructured":"OPC 10000-5 2022. Unified Architecture Part 5: Information Model (OPC 10000-5)."},{"key":"e_1_3_2_1_17_1","first-page":"S7","volume":"202","unstructured":"Siemens. 2021. S7-1500 CPU 1512C-1PN Equipment Manual. Siemens.","journal-title":"Siemens."},{"key":"e_1_3_2_1_18_1","unstructured":"Siemens. 2022. Function Manual Simatic S7-1500 S7-1500R\/H ET 200SP ET 200pro: Cycle and response times. Siemens."},{"key":"e_1_3_2_1_19_1","unstructured":"Bryan\u00a0Singer Tyson\u00a0Maculay. 2011. Cybersecurity for Industrial Control Systems. CRC Boca Raton USA Chapter\u00a01 17\u201382."},{"volume-title":"OPC Unified Architecture","author":"Wolfgang\u00a0Mahnke Matthias\u00a0Damm","key":"e_1_3_2_1_20_1","unstructured":"Matthias\u00a0Damm Wolfgang\u00a0Mahnke, Stefan-Helmut\u00a0Leitner. 2009. OPC Unified Architecture. CRC Press."},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"crossref","unstructured":"Ken Yau K.P. Chow and Siu-Ming Yiu. 2018. A Forensic Logging System for Siemens Programmable Logic Controllers. 331\u2013349.","DOI":"10.1007\/978-3-319-99277-8_18"}],"event":{"name":"ARES 2023: The 18th International Conference on Availability, Reliability and Security","acronym":"ARES 2023","location":"Benevento Italy"},"container-title":["Proceedings of the 18th International Conference on Availability, Reliability and Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3600160.3605059","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3600160.3605059","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T17:49:16Z","timestamp":1750182556000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3600160.3605059"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,8,29]]},"references-count":19,"alternative-id":["10.1145\/3600160.3605059","10.1145\/3600160"],"URL":"https:\/\/doi.org\/10.1145\/3600160.3605059","relation":{},"subject":[],"published":{"date-parts":[[2023,8,29]]},"assertion":[{"value":"2023-08-29","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}