{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,27]],"date-time":"2026-04-27T07:06:44Z","timestamp":1777273604604,"version":"3.51.4"},"publisher-location":"New York, NY, USA","reference-count":40,"publisher":"ACM","license":[{"start":{"date-parts":[[2023,11,20]],"date-time":"2023-11-20T00:00:00Z","timestamp":1700438400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"NSF","award":["2235080"],"award-info":[{"award-number":["2235080"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2023,11,20]]},"DOI":"10.1145\/3689930.3695206","type":"proceedings-article","created":{"date-parts":[[2024,11,20]],"date-time":"2024-11-20T18:20:06Z","timestamp":1732126806000},"page":"27-36","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":1,"title":["Comparing the Security Approaches of CIP and OPC UA"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-7333-3875","authenticated-orcid":false,"given":"Alex","family":"Gebhard","sequence":"first","affiliation":[{"name":"Marquette University & Rockwell Automation, Milwaukee, WI, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2615-2371","authenticated-orcid":false,"given":"Debbie","family":"Perouli","sequence":"additional","affiliation":[{"name":"Marquette University, Milwaukee, WI, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2024,11,20]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1109\/SPW53761.2021.00058"},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","unstructured":"Nancy Cam-Winget and Jack Visoky. 2022. TLS 1.3 Authentication and Integrity-Only Cipher Suites. RFC 9150. https:\/\/doi.org\/10.17487\/RFC9150","DOI":"10.17487\/RFC9150"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1145\/3419394.3423666"},{"key":"e_1_3_2_1_4_1","unstructured":"Damm and Gappmeier and Zugfil and Pl\u00f6b and Fiat and St\u00f6rtkuhl. 2017. OPC UA Security Analysis. https:\/\/www.bsi.bund.de\/SharedDocs\/Downloads\/EN\/BSI\/Publications\/Studies\/OPCUA\/OPCUA.pdf"},{"key":"e_1_3_2_1_5_1","volume-title":"CRASHOVERRIDE: Analysis of the Threat to Electric Grid Operations. https:\/\/www.dragos.com\/wp-content\/uploads\/CrashOverride-01.pdf?utm_referrer=https%3A%2F%2Fwww.dragos.com%2F","year":"2017","unstructured":"Dragos. 2017. CRASHOVERRIDE: Analysis of the Threat to Electric Grid Operations. https:\/\/www.dragos.com\/wp-content\/uploads\/CrashOverride-01.pdf?utm_referrer=https%3A%2F%2Fwww.dragos.com%2F"},{"key":"e_1_3_2_1_6_1","unstructured":"Dragos. 2024. Impact of FrostyGoop ICS Malware on Connected OT Systems. https:\/\/hub.dragos.com\/hubfs\/Reports\/Dragos-FrostyGoop-ICS-Malware-Intel-Brief-0724_r2.pdf"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1109\/JPROC.2005.849714"},{"key":"e_1_3_2_1_8_1","unstructured":"EIP Stack Group. 2024. OpENer. Available at https:\/\/github.com\/EIPStackGroup\/OpENer (2005\/06\/12)."},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/3560826.3563380"},{"key":"e_1_3_2_1_10_1","volume-title":"Industroyer: Biggest malware threat to critical infrastructure since Stuxnet. https:\/\/www.eset.com\/int\/industroyer\/","author":"ESET.","year":"2017","unstructured":"ESET. 2017. Industroyer: Biggest malware threat to critical infrastructure since Stuxnet. https:\/\/www.eset.com\/int\/industroyer\/"},{"key":"e_1_3_2_1_11_1","unstructured":"OPC Foundation. 2023. OPC 10000--3 - UA Specification Part 3 - Address Space Model 1.05.03. https:\/\/reference.opcfoundation.org\/Core\/Part3\/v105\/docs\/"},{"key":"e_1_3_2_1_12_1","unstructured":"Free OPC-UA Library. 2024. Python OPC UA. Available at https:\/\/github.com\/FreeOpcUa\/opcua-asyncio (2005\/06\/12)."},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/3014812.3014832"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","unstructured":"Michael B. Jones John Bradley and Nat Sakimura. 2015. JSON Web Token (JWT). RFC 7519. https:\/\/doi.org\/10.17487\/RFC7519","DOI":"10.17487\/RFC7519"},{"key":"e_1_3_2_1_15_1","unstructured":"Yang Li Shihao Wu and Quan Pan. 2023. Network Security in the Industrial Control System: A Survey. arxiv: 2308.03478 [cs.CR]"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICIBA50161.2020.9276932"},{"key":"e_1_3_2_1_17_1","unstructured":"Michael Mann Ron Floyd Jack Visoky and Joakim Wiberg. 2017. A Practical Guide for CIP Security Device Developers. https:\/\/www.odva.org\/wp-content\/uploads\/2021\/09\/2017-ODVA-Conference_Floyd_Mann_Visoky_Wiberg_CIP_Security_Guide_FINAL.pdf"},{"key":"e_1_3_2_1_18_1","unstructured":"Microsoft and contributors. 2020. DCOM Security Enhancements in Windows XP Service Pack 2 and Windows Server 2003 Service Pack 1. https:\/\/learn.microsoft.com\/en-us\/windows\/win32\/com\/dcom-security-enhancements-in-windows-xp-service-pack-2-and-windows-server-2003-service-pack-1"},{"key":"e_1_3_2_1_19_1","unstructured":"ODVA. [n. d.]. ODVA CIP Security Marketplace. Available at https:\/\/marketplace.odva.org\/products\/#?vendors=all&productTypes= all&deviceTypes=all&docYears=all&categories=all&services=security &page=1&lang=en&view=search&productDisplay=all\/ (2024\/04\/08)."},{"key":"e_1_3_2_1_20_1","unstructured":"ODVA Inc. [n. d.]. Industrial Automation Technologies and Standards. Available at https:\/\/odva.org (2024\/03\/12)."},{"key":"e_1_3_2_1_21_1","first-page":"35","article-title":"The CIP Networks Library Volume 1","volume":"3","author":"Inc ODVA","year":"2023","unstructured":"ODVA, Inc. 2023. The CIP Networks Library Volume 1: Common Industrial Protocol Edition 3.35. Upon request to licensed parties","journal-title":"Common Industrial Protocol Edition"},{"key":"e_1_3_2_1_22_1","first-page":"17","article-title":"The CIP Networks Library Volume 8","volume":"1","author":"Inc ODVA","year":"2023","unstructured":"ODVA, Inc. 2023. The CIP Networks Library Volume 8: CIP Security Edition 1.17. Upon request to licensed parties","journal-title":"CIP Security Edition"},{"key":"e_1_3_2_1_23_1","unstructured":"OPC Foundation. 2022. OPC 10000--1 - UA Specification Part 1 - Overview and Concepts 1.05.02. https:\/\/reference.opcfoundation.org\/Core\/Part1\/v105\/docs\/"},{"key":"e_1_3_2_1_24_1","unstructured":"OPC Foundation. 2022. OPC 10000--12 - UA Specification Part 12 - Discovery and Global Services 1.05.02. https:\/\/reference.opcfoundation.org\/GDS\/v105\/docs\/"},{"key":"e_1_3_2_1_25_1","unstructured":"OPC Foundation. 2022. OPC 10000--7 - UA Specification Part 7 - Profiles 1.05.02. https:\/\/reference.opcfoundation.org\/Core\/Part7\/v105\/docs\/"},{"key":"e_1_3_2_1_26_1","unstructured":"OPC Foundation. 2022 d. Profile Core 2022 Server Facet. https:\/\/profiles.opcfoundation.org\/profile\/1322"},{"key":"e_1_3_2_1_27_1","unstructured":"OPC Foundation. 2023. OPC 10000--2 - UA Specification Part 2 - Security Model 1.05.03. https:\/\/reference.opcfoundation.org\/Core\/Part2\/v105\/docs\/"},{"key":"e_1_3_2_1_28_1","unstructured":"OPC Foundation. 2023. OPC 10000--6 - UA Specification Part 6 - Mappings 1.05.03. https:\/\/reference.opcfoundation.org\/Core\/Part6\/v105\/docs\/"},{"key":"e_1_3_2_1_29_1","unstructured":"OPC Foundation. 2024. History. Available at https:\/\/opcfoundation.org\/about\/opc-foundation\/history\/ (2024\/04\/08)."},{"key":"e_1_3_2_1_30_1","unstructured":"OPC Foundation. 2024. OPC Online Reference. Available at https:\/\/reference.opcfoundation.org\/ (2024\/04\/08)."},{"key":"e_1_3_2_1_31_1","unstructured":"OPC Foundation. 2024. OPC Unified Architecture. NET Standard. Available at https:\/\/github.com\/OPCFoundation\/UA-.NETStandard (2005\/06\/12)."},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1109\/ETFA46521.2020.9212112"},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","unstructured":"Max Pritikin Peter E. Yee and Dan Harkins. 2013. Enrollment over Secure Transport. RFC 7030. https:\/\/doi.org\/10.17487\/RFC7030","DOI":"10.17487\/RFC7030"},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","unstructured":"Eric Rescorla and Tim Dierks. 2008. The Transport Layer Security (TLS) Protocol Version 1.2. RFC 5246. https:\/\/doi.org\/10.17487\/RFC5246","DOI":"10.17487\/RFC5246"},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","unstructured":"Eric Rescorla and Nagendra Modadugu. 2012. Datagram Transport Layer Security Version 1.2. RFC 6347. https:\/\/doi.org\/10.17487\/RFC6347","DOI":"10.17487\/RFC6347"},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"crossref","unstructured":"Viktor Schiffer. 2016. The Common Industrial Protocol (CIP?) and the Family of CIP Networks. https:\/\/www.odva.org\/wp-content\/uploads\/2020\/06\/PUB00123R1_Common-Industrial_Protocol_and_Family_of_CIP_Networks.pdf","DOI":"10.1201\/b17365-10"},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICAT.2013.6684065"},{"key":"e_1_3_2_1_38_1","unstructured":"Jack Visoky and Joakim Wiberg. 2020. CIP Security and IEC 62443--4--2. https:\/\/www.odva.org\/wp-content\/uploads\/2020\/05\/2020-ODVA-Conference_CIP_Security_and_IEC_62443_Visoky_Wiberg_Final.pdf"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2018.2872114"},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.3390\/app5030446"}],"event":{"name":"CCS '24: ACM SIGSAC Conference on Computer and Communications Security","location":"Salt Lake City UT USA","acronym":"CCS '24","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2024 Workshop on Re-design Industrial Control Systems with Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3689930.3695206","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3689930.3695206","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,23]],"date-time":"2025-08-23T18:21:02Z","timestamp":1755973262000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3689930.3695206"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,11,20]]},"references-count":40,"alternative-id":["10.1145\/3689930.3695206","10.1145\/3689930"],"URL":"https:\/\/doi.org\/10.1145\/3689930.3695206","relation":{},"subject":[],"published":{"date-parts":[[2023,11,20]]},"assertion":[{"value":"2024-11-20","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}