{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,24]],"date-time":"2026-06-24T16:05:25Z","timestamp":1782317125985,"version":"3.54.5"},"reference-count":41,"publisher":"Association for Computing Machinery (ACM)","issue":"1","license":[{"start":{"date-parts":[[2024,2,16]],"date-time":"2024-02-16T00:00:00Z","timestamp":1708041600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"NSF-CNS","award":["1929410, 1931573"],"award-info":[{"award-number":["1929410, 1931573"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["Proc. ACM Meas. Anal. Comput. Syst."],"published-print":{"date-parts":[[2024,2,16]]},"abstract":"<jats:p>Despite a growing interest in understanding the industrial control networks that monitor and control our critical infrastructures (such as the power grid), to date, SCADA networks have been analyzed in isolation from each other. They have been treated as monolithic networks without taking into consideration their differences. In this paper, we analyze real-world data from different parts of a power grid (generation, transmission, distribution, and end-consumer) and show that these industrial networks exhibit a variety of unique behaviors and configurations that have not been documented before. To the best of our knowledge, our study is the first to tackle the analysis of power grid networks at this level. Our results help us dispel several misconceptions proposed by previous work, and we also provide new insights into the differences and types of SCADA networks.<\/jats:p>","DOI":"10.1145\/3639036","type":"journal-article","created":{"date-parts":[[2024,2,21]],"date-time":"2024-02-21T17:01:32Z","timestamp":1708534892000},"page":"1-32","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":9,"title":["SCADA World: An Exploration of the Diversity in Power Grid Networks"],"prefix":"10.1145","volume":"8","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-9008-7717","authenticated-orcid":false,"given":"Neil","family":"Ortiz","sequence":"first","affiliation":[{"name":"University of California, Santa Cruz, Santa Cruz, CA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5142-9750","authenticated-orcid":false,"given":"Alvaro A.","family":"Cardenas","sequence":"additional","affiliation":[{"name":"University of California, Santa Cruz, Santa Cruz, CA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8371-4759","authenticated-orcid":false,"given":"Avishai","family":"Wool","sequence":"additional","affiliation":[{"name":"Tel Aviv University, Tel Aviv, Israel"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2024,2,21]]},"reference":[{"key":"e_1_2_1_1_1","unstructured":"2006. IEC 60870--5--104. (jun 2006). https:\/\/webstore.iec.ch\/publication\/3746&preview=1"},{"key":"e_1_2_1_2_1","volume-title":"MODBUS Application Protocol Specification V1.1b3. (apr","year":"2012","unstructured":"2012. MODBUS Application Protocol Specification V1.1b3. (apr 2012). https:\/\/www.modbus.org\/docs\/Modbus_ Application_Protocol_V1_1b3.pdf"},{"key":"e_1_2_1_3_1","volume-title":"IEEE Std C37.118.2--2011 IEEE Standard for Synchrophasor Data Transfer for Power Systems. (dec","author":"IEEE Standards Association","year":"2011","unstructured":"IEEE Standards Association. 2011. IEEE Std C37.118.2--2011 IEEE Standard for Synchrophasor Data Transfer for Power Systems. (dec 2011), 53. https:\/\/ieeexplore.ieee.org\/document\/6111222"},{"key":"e_1_2_1_4_1","volume-title":"Telecontrol protocols compatible with ISO standards and ITU-T recommendations - TASE.2 User guide. (dec","author":"IEEE Standards Association","year":"2014","unstructured":"IEEE Standards Association. 2014. Telecontrol protocols compatible with ISO standards and ITU-T recommendations - TASE.2 User guide. (dec 2014), 53. https:\/\/webstore.iec.ch\/publication\/3760"},{"key":"e_1_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2019.00043"},{"key":"e_1_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2018.00036"},{"key":"e_1_2_1_7_1","volume-title":"Difficulties in Modeling SCADA Traffic: A Comparative Analysis","author":"Barbosa Rafael R. R.","unstructured":"Rafael R. R. Barbosa, Ramin Sadre, and Aiko Pras. 2012. Difficulties in Modeling SCADA Traffic: A Comparative Analysis. In Passive and Active Measurement, Nina Taft and Fabio Ricciato (Eds.). Springer Berlin Heidelberg, Berlin, Heidelberg, 126--135."},{"key":"e_1_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1016\/j"},{"key":"e_1_2_1_9_1","first-page":"21","article-title":"Rogue7: Rogue Engineering Station attacks on S7 Simatic PLCs","volume":"13","author":"Biham Eli","year":"2019","unstructured":"Eli Biham, Sara Bitan, Aviad Carmel, Alon Dankner, Avishai Wool, and Uriel Malin. 2019. Rogue7: Rogue Engineering Station attacks on S7 Simatic PLCs. Black Hat 13, 2 (2019), 21.","journal-title":"Black Hat"},{"key":"e_1_2_1_10_1","volume-title":"2020 IEEE International Conference on Communications, Control, and Computing Technologies for Smart Grids (SmartGridComm). 1--7. https:\/\/doi.org\/10","author":"Bohara Atul","year":"2020","unstructured":"Atul Bohara, Jordi Ros-Giralt, Ghada Elbez, Alfonso Valdes, Klara Nahrstedt, and William H. Sanders. 2020. ED4GAP: Efficient Detection for GOOSE-Based Poisoning Attacks on IEC 61850 Substations. In 2020 IEEE International Conference on Communications, Control, and Computing Technologies for Smart Grids (SmartGridComm). 1--7. https:\/\/doi.org\/10. 1109\/SmartGridComm47815.2020.9303015"},{"key":"e_1_2_1_11_1","volume-title":"Proceeding of the SCADA Security Scientifc Symposium","author":"Cheung Steven","year":"2007","unstructured":"Steven Cheung, Bruno Dutertre, Martin Fong, Ulf Lindqvist, Alfonso Valdes, and Keith Skinner. 2007. Using Model-based Intrusion Detection for SCADA Networks. Proceeding of the SCADA Security Scientifc Symposium (2007), 12."},{"key":"e_1_2_1_12_1","volume-title":"CBMS Regional Conference Series in Mathematics","volume":"92","author":"Chung Fan","year":"1996","unstructured":"Fan Chung. 1996. Spectral Graph Theory (1 ed.). CBMS Regional Conference Series in Mathematics, Vol. 92. American Mathematical Society."},{"key":"e_1_2_1_13_1","unstructured":"International Electrotechnical Commission Technical Committee 57 and International Electrotechnical Commission. 2011. Communication networks and systems for power utility automation. Part 8--1 . OCLC: 914242803."},{"key":"e_1_2_1_14_1","unstructured":"Tsvika Dagan and Avishai Wool. 2014. Parrot a software-only anti-spoofing defense system for the CAN bus. (2014) 10."},{"key":"e_1_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1016\/j"},{"key":"e_1_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijcip.2015.05.001"},{"key":"e_1_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/3078505.3078525"},{"key":"e_1_2_1_18_1","volume-title":"Sandworm: A new era of cyberwar and the hunt for the Kremlin's most dangerous hackers. Anchor.","author":"Greenberg Andy","year":"2019","unstructured":"Andy Greenberg. 2019. Sandworm: A new era of cyberwar and the hunt for the Kremlin's most dangerous hackers. Anchor."},{"key":"e_1_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/3422604.3425945"},{"key":"e_1_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/3098954.3103166"},{"key":"e_1_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1214\/aoms\/1177703593"},{"key":"e_1_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1109\/GLOCOMW.2012.6477809"},{"key":"e_1_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1109\/NPSC57038.2022.10069042"},{"key":"e_1_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1109\/SmartGridComm.2014.7007760"},{"key":"e_1_2_1_25_1","volume-title":"European Cyber Conflict Research Initiative Tallinn Workshop (ECCRI","author":"Kaminska Monica","year":"2022","unstructured":"Monica Kaminska, James Shires, and Max Willem Eline Smeets. 2022. Cyber Operations During the 2022 Russian Invasion of Ukraine: Lessons Learned (so far). In European Cyber Conflict Research Initiative Tallinn Workshop (ECCRI 2022). European Cyber Conflict Research Initiative."},{"key":"e_1_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1109\/EFTA.2007.4416946"},{"key":"e_1_2_1_27_1","first-page":"37","article-title":"ACCURATE MODELING OF THE SIEMENS S7 SCADA PROTOCOL FOR INTRUSION DETECTION AND DIGITAL FORENSICS","volume":"9","author":"Kleinman Amit","year":"2014","unstructured":"Amit Kleinman and Avishai Wool. 2014. ACCURATE MODELING OF THE SIEMENS S7 SCADA PROTOCOL FOR INTRUSION DETECTION AND DIGITAL FORENSICS. The Journal of Digital Forensics, Security and Law : JDFSL 9, 2 (2014), 37--50. https:\/\/www.proquest.com\/scholarly-journals\/accurate-modeling-siemens-s7-scada-protocol\/docview\/ 1626534339\/se-2","journal-title":"The Journal of Digital Forensics, Security and Law : JDFSL"},{"key":"e_1_2_1_28_1","volume-title":"Stealthy Deception Attacks Against SCADA Systems","author":"Kleinmann Amit","unstructured":"Amit Kleinmann, Ori Amichay, Avishai Wool, David Tenenbaum, Ofer Bar, and Leonid Lev. 2018. Stealthy Deception Attacks Against SCADA Systems. In Computer Security, Sokratis K. Katsikas, Fr\u00e9d\u00e9ric Cuppens, Nora Cuppens, Costas Lambrinoudakis, Christos Kalloniatis, John Mylopoulos, Annie Ant\u00f3n, and Stefanos Gritzalis (Eds.). Springer International Publishing, Cham, 93--109."},{"key":"e_1_2_1_29_1","volume-title":"Cyber-Physical Security for Critical Infrastructures Protection, Habtamu Abie, Silvio Ranise, Luca Verderame, Enrico Cambiaso, Rita Ugarelli, Gabriele Giunta, Isabel Pra\u00e7a","author":"Lin C.-Y.","unstructured":"C.-Y. Lin and Simin Nadjm-Tehrani. 2021. A Comparative Analysis of Emulated and Real IEC-104 Spontaneous Traffic in Power System Networks. In Cyber-Physical Security for Critical Infrastructures Protection, Habtamu Abie, Silvio Ranise, Luca Verderame, Enrico Cambiaso, Rita Ugarelli, Gabriele Giunta, Isabel Pra\u00e7a, and Federica Battisti (Eds.). Springer International Publishing, Cham, 207--223."},{"key":"e_1_2_1_30_1","volume-title":"Critical Information Infrastructures Security","author":"Lin Chih-Yuan","unstructured":"Chih-Yuan Lin, Simin Nadjm-Tehrani, and Mikael Asplund. 2018. Timing-Based Anomaly Detection in SCADA Networks. In Critical Information Infrastructures Security. Springer International Publishing, Cham, 48--59."},{"key":"e_1_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.001.2200568"},{"key":"e_1_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/3419394.3423630"},{"key":"e_1_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.14236\/ewic\/ics-csr2014.5"},{"key":"e_1_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.001.2200574"},{"key":"e_1_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1109\/SPW54247.2022.9833864"},{"key":"e_1_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1109\/IEEECONF49502.2020.9141611"},{"key":"e_1_2_1_37_1","volume-title":"2024 IEEE Symposium on Security and Privacy.","author":"Salazar L.","unstructured":"L. Salazar, S. Castro, J. Lozano, K. Koneru, E. Zambon, B. Huang, R. Baldick, and A. Cardenas. 2024. A Tale of Two Industroyers: It was the Season of Darkness. In 2024 IEEE Symposium on Security and Privacy."},{"key":"e_1_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1109\/ISGTEurope52324.2021.9639905"},{"key":"e_1_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1145\/633025.633040"},{"key":"e_1_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2018.00025"},{"key":"e_1_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1109\/PESMG.2013.6672100"}],"container-title":["Proceedings of the ACM on Measurement and Analysis of Computing Systems"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3639036","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3639036","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,23]],"date-time":"2025-08-23T01:38:21Z","timestamp":1755913101000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3639036"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,2,16]]},"references-count":41,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2024,2,16]]}},"alternative-id":["10.1145\/3639036"],"URL":"https:\/\/doi.org\/10.1145\/3639036","relation":{},"ISSN":["2476-1249"],"issn-type":[{"value":"2476-1249","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,2,16]]},"assertion":[{"value":"2024-02-21","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}