{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,27]],"date-time":"2025-10-27T18:07:52Z","timestamp":1761588472300,"version":"build-2065373602"},"reference-count":29,"publisher":"IBM","issue":"4","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IBM J. Res. & Dev."],"published-print":{"date-parts":[[2016,7]]},"DOI":"10.1147\/jrd.2016.2575698","type":"journal-article","created":{"date-parts":[[2016,7,27]],"date-time":"2016-07-27T14:48:29Z","timestamp":1469630909000},"page":"13:1-13:12","source":"Crossref","is-referenced-by-count":8,"title":["Security intelligence for industrial control systems"],"prefix":"10.1147","volume":"60","author":[{"given":"A.","family":"Amrein","sequence":"first","affiliation":[{"name":"Hochschule für Technik, Rapperswil HSR, Rapperswil, Switzerland"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"V.","family":"Angeletti","sequence":"additional","affiliation":[{"name":"Enel Global ICT, Pisa, Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"A.","family":"Beitler","sequence":"additional","affiliation":[{"name":"IBM Research Division, IBM Research - Zurich, Rueschlikon, Switzerland"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"M.","family":"N\u00e9met","sequence":"additional","affiliation":[{"name":"IBM Research Division, IBM Research - Zurich, Rueschlikon, Switzerland"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"M.","family":"Reiser","sequence":"additional","affiliation":[{"name":"Hochschule für Technik, Rapperswil HSR, Rapperswil, Switzerland"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"S.","family":"Riccetti","sequence":"additional","affiliation":[{"name":"IBM Global Cyber Security Intelligence and Response Team (CSIRT), IBM Italia, Segrate, Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"M. Ph.","family":"Stoecklin","sequence":"additional","affiliation":[{"name":"IBM Research Division, IBM Thomas J. Watson Research Center, Yorktown Heights, NY, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"A.","family":"Wespi","sequence":"additional","affiliation":[{"name":"IBM Research Division, IBM Research - Zurich, Rueschlikon, Switzerland"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"3082","reference":[{"journal-title":"A taxonomy of security vulnerabilities in SCADA protocols","year":"2007","author":"igure","key":"ref10"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/THS.2009.5168010"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/ETFA.2009.5347134"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-45215-7_14"},{"key":"ref14","first-page":"1","article-title":"Using model-based intrusion detection for SCADA networks","volume":"46","author":"cheung","year":"0","journal-title":"Proc SCADA Security Sci Symp"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijcip.2013.05.001"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/2732198.2732200"},{"key":"ref17","first-page":"1","article-title":"Industrial control system network intrusion detection by telemetry analysis","volume":"13","author":"ponomarev","year":"2015","journal-title":"IEEE Trans Depend and Sec Comp"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijcip.2013.08.003"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/2592791.2592792"},{"journal-title":"SQLite","year":"0","key":"ref28"},{"journal-title":"OPC Data Access (OPC DA) 3 00 specification","year":"0","key":"ref4"},{"journal-title":"Wireshark","year":"0","key":"ref27"},{"article-title":"Control systems cyber security: Defense in depth strategies","year":"2006","author":"kuipers","key":"ref3"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-19644-7_38"},{"journal-title":"R Project","year":"0","key":"ref29"},{"journal-title":"Anomaly detection in SCADA systems A network based approach","year":"2014","author":"barbosa","key":"ref5"},{"journal-title":"Robustness and survivability of smart power grid and SCADA networks when subjected to severe emergencies vulnerability and WMD attacks","year":"2013","author":"chopade","key":"ref8"},{"key":"ref7","first-page":"160","article-title":"SCADA systems: Vulnerabilities and remediation","volume":"20","author":"fernandez","year":"2005","journal-title":"J Comput Sci Colleges"},{"journal-title":"Alert (ICS-ALERT-14-176-02A) ICS focused Malware (Update A)","year":"2014","key":"ref2"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-39235-1_10"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/MSPEC.2013.6471059"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-38998-6_8"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1504\/IJWMC.2015.066754"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/1852666.1852690"},{"journal-title":"tcpdump","year":"0","key":"ref24"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/TSG.2011.2162432"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.17487\/rfc5101"},{"journal-title":"Hespera traffic meter","year":"2015","key":"ref25"}],"container-title":["IBM Journal of Research and Development"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/5288520\/7523342\/07523351.pdf?arnumber=7523351","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,27]],"date-time":"2025-10-27T18:03:19Z","timestamp":1761588199000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/7523351\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2016,7]]},"references-count":29,"journal-issue":{"issue":"4"},"URL":"https:\/\/doi.org\/10.1147\/jrd.2016.2575698","relation":{},"ISSN":["0018-8646","0018-8646"],"issn-type":[{"type":"print","value":"0018-8646"},{"type":"electronic","value":"0018-8646"}],"subject":[],"published":{"date-parts":[[2016,7]]}}}