{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,2]],"date-time":"2026-01-02T07:36:47Z","timestamp":1767339407055,"version":"3.37.3"},"reference-count":56,"publisher":"Wiley","license":[{"start":{"date-parts":[[2017,11,22]],"date-time":"2017-11-22T00:00:00Z","timestamp":1511308800000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"Department of Education, Language Policy and Culture of the Basque Government","award":["766994"],"award-info":[{"award-number":["766994"]}]},{"name":"European Union\u2019s Horizon 2020 research and innovation programme","award":["766994"],"award-info":[{"award-number":["766994"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Security and Communication Networks"],"published-print":{"date-parts":[[2017,11,22]]},"abstract":"<jats:p>Industrial Networks (INs) are widespread environments where heterogeneous devices collaborate to control and monitor physical processes. Some of the controlled processes belong to Critical Infrastructures (CIs), and, as such, IN protection is an active research field. Among different types of security solutions, IN Anomaly Detection Systems (ADSs) have received wide attention from the scientific community. While INs have grown in size and in complexity, requiring the development of novel, Big Data solutions for data processing, IN ADSs have not evolved at the same pace. In parallel, the development of Big Data frameworks such as Hadoop or Spark has led the way for applying Big Data Analytics to the field of cyber-security, mainly focusing on the Information Technology (IT) domain. However, due to the particularities of INs, it is not feasible to directly apply IT security mechanisms in INs, as IN ADSs face unique characteristics. In this work we introduce three main contributions. First, we survey the area of Big Data ADSs that could be applicable to INs and compare the surveyed works. Second, we develop a novel taxonomy to classify existing IN-based ADSs. And, finally, we present a discussion of open problems in the field of Big Data ADSs for INs that can lead to further development.<\/jats:p>","DOI":"10.1155\/2017\/9150965","type":"journal-article","created":{"date-parts":[[2017,11,22]],"date-time":"2017-11-22T23:31:48Z","timestamp":1511393508000},"page":"1-17","source":"Crossref","is-referenced-by-count":16,"title":["Towards Large-Scale, Heterogeneous Anomaly Detection Systems in Industrial Networks: A Survey of Current Trends"],"prefix":"10.1155","volume":"2017","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-9641-5646","authenticated-orcid":true,"given":"Mikel","family":"Iturbe","sequence":"first","affiliation":[{"name":"Department of Electronics and Computing, Mondragon Unibertsitatea, Goiru 2, 20500 Arrasate-Mondrag\u00f3n, Spain"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"I\u00f1aki","family":"Garitano","sequence":"additional","affiliation":[{"name":"Department of Electronics and Computing, Mondragon Unibertsitatea, Goiru 2, 20500 Arrasate-Mondrag\u00f3n, Spain"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Urko","family":"Zurutuza","sequence":"additional","affiliation":[{"name":"Department of Electronics and Computing, Mondragon Unibertsitatea, Goiru 2, 20500 Arrasate-Mondrag\u00f3n, Spain"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Roberto","family":"Uribeetxeberria","sequence":"additional","affiliation":[{"name":"Department of Electronics and Computing, Mondragon Unibertsitatea, Goiru 2, 20500 Arrasate-Mondrag\u00f3n, Spain"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"311","reference":[{"key":"5","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2011.67"},{"year":"2007","key":"6"},{"volume-title":"Duqu: Analysis, detection, and lessons learned","year":"2012","key":"8"},{"key":"10","doi-asserted-by":"publisher","DOI":"10.1145\/2542049"},{"key":"13","doi-asserted-by":"publisher","DOI":"10.1145\/1327452.1327492"},{"key":"15","doi-asserted-by":"publisher","DOI":"10.1007\/s11036-013-0489-0"},{"volume":"6","journal-title":"META Group Research Note","year":"2001","key":"16"},{"first-page":"417","volume-title":"Big data analytics on smart grid: Mining pmu data for event and anomaly detection","year":"2016","key":"108"},{"issue":"6","key":"17","doi-asserted-by":"crossref","first-page":"74","DOI":"10.1109\/MSP.2013.138","volume":"11","year":"2013","journal-title":"Security & Privacy, IEEE"},{"key":"18","doi-asserted-by":"publisher","DOI":"10.1016\/S1361-3723(15)30085-3"},{"key":"20","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2012.2198666"},{"key":"22","doi-asserted-by":"publisher","DOI":"10.1109\/SURV.2012.071812.00124"},{"key":"90","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-23201-0_22"},{"key":"103","doi-asserted-by":"publisher","DOI":"10.1109\/MIC.2013.84"},{"issue":"3","key":"97","first-page":"93","volume":"1","year":"2012","journal-title":"SCIENCE"},{"key":"96","doi-asserted-by":"crossref","first-page":"824","DOI":"10.1016\/j.procs.2016.07.238","volume":"93","year":"2016","journal-title":"Procedia Computer Science"},{"key":"102","doi-asserted-by":"publisher","DOI":"10.1007\/s10207-012-0163-8"},{"key":"93","doi-asserted-by":"publisher","DOI":"10.1007\/s11227-015-1615-5"},{"key":"86","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-28865-9_10"},{"key":"19","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2006.03.001"},{"key":"21","doi-asserted-by":"publisher","DOI":"10.15837\/ijccc.2012.4.1366"},{"year":"2002","key":"24"},{"key":"25","doi-asserted-by":"publisher","DOI":"10.1109\/jproc.2005.849714"},{"key":"27","doi-asserted-by":"publisher","DOI":"10.1016\/S1389-1286(98)00017-6"},{"key":"28","doi-asserted-by":"publisher","DOI":"10.1109\/comst.2015.2494502"},{"key":"29","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-40090-2_27"},{"key":"30","doi-asserted-by":"publisher","DOI":"10.4028\/www.scientific.net\/AMM.456.178"},{"key":"31","doi-asserted-by":"publisher","DOI":"10.1088\/1742-6596\/659\/1\/012055"},{"key":"33","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2017.2670505"},{"key":"35","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2017.2731945"},{"key":"36","doi-asserted-by":"publisher","DOI":"10.1007\/s11265-016-1119-4"},{"key":"37","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-04798-5_10"},{"key":"45","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-09465-6"},{"journal-title":"Data Engineering","first-page":"28","year":"2015","key":"47"},{"key":"48","doi-asserted-by":"publisher","DOI":"10.1186\/s40537-015-0013-4"},{"key":"50","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2014.03.066"},{"key":"51","doi-asserted-by":"publisher","DOI":"10.1007\/s00500-013-1218-0"},{"key":"52","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-28121-6_7"},{"key":"55","doi-asserted-by":"publisher","DOI":"10.1504\/IJITCC.2011.042126"},{"key":"56","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-13817-6_39"},{"key":"60","doi-asserted-by":"publisher","DOI":"10.4236\/jis.2013.43018"},{"key":"62","first-page":"28","volume":"3","year":"Nov 2013","journal-title":"Journal of Internet Services and Information Security"},{"journal-title":"in Prooceedings of Blackhat Europe","year":"2012","key":"69"},{"key":"70","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-20305-3_5"},{"key":"77","doi-asserted-by":"publisher","DOI":"10.14778\/1687553.1687609"},{"journal-title":"Techniques of Statistical Analysis","year":"1947","key":"81"},{"key":"82","doi-asserted-by":"publisher","DOI":"10.1080\/00401706.1979.10489779"},{"key":"87","doi-asserted-by":"publisher","DOI":"10.1109\/LCOMM.2007.070761"},{"key":"89","doi-asserted-by":"publisher","DOI":"10.1145\/1656274.1656278"},{"key":"91","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2012.01.016"},{"issue":"12","key":"98","first-page":"21","volume":"24","year":"1999","journal-title":"Dr. Dobb's Journal"},{"year":"1994","key":"99"},{"issue":"2","key":"104","doi-asserted-by":"crossref","first-page":"93","DOI":"10.1111\/j.1538-4632.1995.tb00338.x","volume":"27","year":"1995","journal-title":"Geographical Analysis"},{"key":"110","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-28920-0_10"},{"key":"111","doi-asserted-by":"publisher","DOI":"10.1002\/cem.2806"},{"key":"113","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-45355-1_5"}],"container-title":["Security and Communication Networks"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/downloads.hindawi.com\/journals\/scn\/2017\/9150965.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/downloads.hindawi.com\/journals\/scn\/2017\/9150965.xml","content-type":"application\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/downloads.hindawi.com\/journals\/scn\/2017\/9150965.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,6,28]],"date-time":"2024-06-28T23:32:46Z","timestamp":1719617566000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.hindawi.com\/journals\/scn\/2017\/9150965\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017,11,22]]},"references-count":56,"alternative-id":["9150965","9150965"],"URL":"https:\/\/doi.org\/10.1155\/2017\/9150965","relation":{},"ISSN":["1939-0114","1939-0122"],"issn-type":[{"type":"print","value":"1939-0114"},{"type":"electronic","value":"1939-0122"}],"subject":[],"published":{"date-parts":[[2017,11,22]]}}}