1. Adepu, S., Mathur, A.: From design to invariants: detecting attacks on cyber physical systems. In: 2017 IEEE International Conference on Software Quality, Reliability and Security Companion (QRS-C), pp. 533–540. IEEE (2017)

   Google Scholar 

2. Agrawal, R., Imieliński, T., Swami, A.: Mining association rules between sets of items in large databases. In: Proceedings of the 1993 ACM SIGMOD International Conference on Management of Data, pp. 207–216 (1993)

   Google Scholar 

3. Ahmed, C.M., et al.: NoisePrint: attack detection using sensor and process noise fingerprint in cyber physical systems. In: Proceedings of the 2018 on Asia Conference on Computer and Communications Security, pp. 483–497. ACM, Incheon ROK (2018)

   Google Scholar 

4. Ahmed, C.M., Zhou, J., Mathur, A.P.: Noise matters: using sensor and process noise fingerprint to detect stealthy cyber attacks and authenticate sensors in CPS. In: Proceedings of the 34th Annual Computer Security Applications Conference, pp. 566–581. ACM, San Juan PR USA (2018)

   Google Scholar 

5. Aliabadi, M.R., Kamath, A.A., Gascon-Samson, J., Pattabiraman, K.: Artinali: dynamic invariant detection for cyber-physical system security. In: Proceedings of the 2017 11th Joint Meeting on Foundations of Software Engineering (2017)

   Google Scholar 

6. Apolinário, F., Escravana, N., Hervé, É., Pardal, M.L., Correia, M.: Fingerci: generating specifications for critical infrastructures. In: Proceedings of the 37th ACM/SIGAPP Symposium on Applied Computing, pp. 183–186 (2022)

   Google Scholar 

7. Apolinário, F., et al.: COMSEC: secure communications for baggage handling systems. In: Katsikas, S., et al. Computer Security. ESORICS 2022 International Workshops. ESORICS 2022. Lecture Notes in Computer Science, vol. 13785, pp. 329–345. Springer, Cham (2022).https://doi.org/10.1007/978-3-031-25460-4_19

8. Brin, S., Motwani, R., Ullman, J.D., Tsur, S.: Dynamic itemset counting and implication rules for market basket data. In: Proceedings of the 1997 ACM SIGMOD international conference on Management of data, pp. 255–264 (1997)

   Google Scholar 

9. Carvalho, O., Apolinário, F., Escravana, N., Ribeiro, C.: CIIA: critical infrastructure impact assessment. In: Proceedings of the 37th ACM/SIGAPP Symposium on Applied Computing, pp. 124–132 (2022)

   Google Scholar 

10. Ceccato, M., Driouich, Y., Lucchese, M., Lanotte, R., Merro, M.: Towards reverse engineering of industrial physical processes. In: Katsikas, S., et al. Computer Security. ESORICS 2022 International Workshops. ESORICS 2022. Lecture Notes in Computer Science, vol. 13785. Springer, Cham (2022).https://doi.org/10.1007/978-3-031-25460-4_15

11. Feng, C., Palleti, V., Mathur, A., Chana, D.: A systematic framework to generate invariants for anomaly detection in industrial control systems. In: NDSS (2019)

    Google Scholar 

12. Feng, C., Tian, P.: Time series anomaly detection for cyber-physical systems via neural system identification and bayesian filtering. In: Proceedings of the 27th ACM SIGKDD Conference on Knowledge Discovery & Data Mining. KDD 2021, Association for Computing Machinery, New York, NY, USA (2021)

    Google Scholar 

13. Fung, C., Srinarasi, S., Lucas, K., Phee, H.B., Bauer, L.: Perspectives from a comprehensive evaluation of reconstruction-based anomaly detection in industrial control systems. In: Atluri, V., Di Pietro, R., Jensen, C.D., Meng, W. (eds.) Computer Security - ESORICS 2022, pp. 493–513. Springer Nature Switzerland, Cham (2022).https://doi.org/10.1007/978-3-031-17143-7_24

    Chapter  Google Scholar 

14. Grandini, M., Bagli, E., Visani, G.: Metrics for multi-class classification: an overview. arXiv preprintarXiv:2008.05756 (2020)

15. Hajj, S., El Sibai, R., Bou Abdo, J., Demerjian, J., Makhoul, A., Guyeux, C.: Anomaly-based intrusion detection systems: the requirements, methods, measurements, and datasets. Trans. Emerg. Telecommun. Technol.32(4), e4240 (2021)

    Article  Google Scholar 

16. Huang, Y.L., Cárdenas, A.A., Amin, S., Lin, Z.S., Tsai, H.Y., Sastry, S.: Understanding the physical and economic consequences of attacks on control systems. Int. J. Crit. Infrastruct. Prot.2(3), 73–83 (2009)

    Article  Google Scholar 

17. Kaouk, M., Flaus, J.M., Potet, M.L., Groz, R.: A review of intrusion detection systems for industrial control systems. In: 2019 6th International Conference on Control, Decision and Information Technologies (CoDIT), pp. 1699–1704 (2019)

    Google Scholar 

18. Kiran, R.U., Reddy, P.K.: Novel techniques to reduce search space in multiple minimum supports-based frequent pattern mining algorithms. In: Proceedings of the 14th International Conference on Extending Database Technology (2011)

    Google Scholar 

19. Kumbhare, T.A., Chobe, S.V.: An overview of association rule mining algorithms. Int. J. Comput. Sci. Inf. Technol.5, 927–930 (2014)

    Google Scholar 

20. Lee, E.A.: Cyber physical systems: design challenges. In: 2008 11th IEEE International Symposium on Object and Component-Oriented Real-Time Distributed Computing (ISORC), pp. 363–369 (2008)

    Google Scholar 

21. Lima, J., Apolinário, F., Escravana, N., Ribeiro, C.: BP-IDS: using business process specification to leverage intrusion detection in critical infrastructures. In: 2020 IEEE International Symposium on Software Reliability Engineering Workshops (ISSREW), pp. 7–12. IEEE (2020)

    Google Scholar 

22. Liu, B., Hsu, W., Ma, Y.: Mining association rules with multiple minimum supports. In: Proceedings of the Fifth ACM SIGKDD International Conference on Knowledge Discovery and Data Mining, pp. 337–341 (1999)

    Google Scholar 

23. Pal, K., Adepu, S., Goh, J.: Effectiveness of association rules mining for invariants generation in cyber-physical systems. In: 2017 IEEE 18th International Symposium on High Assurance Systems Engineering (HASE), pp. 124–127. IEEE (2017)

    Google Scholar 

24. Raschka, S.: MLxtend: providing machine learning and data science utilities and extensions to python’s scientific computing stack. J. Open Source Softw.3(24), 638 (2018)

    Article  Google Scholar 

25. Rubio, J.E., Alcaraz, C., Roman, R., Lopez, J.: Analysis of intrusion detection systems in industrial ecosystems. In: SECRYPT, pp. 116–128 (2017)

    Google Scholar 

26. Umer, M.A., Mathur, A., Junejo, K.N., Adepu, S.: Generating invariants using design and data-centric approaches for distributed attack detection. Int. J. Crit. Infrastruct. Prot.28, 100341 (2020)

    Article  Google Scholar 

27. Wolsing, K., Thiemt, L., Sloun, C.v., Wagner, E., Wehrle, K., Henze, M.: Can industrial intrusion detection be simple? In: Atluri, V., Di Pietro, R., Jensen, C.D., Meng, W. (eds.) Computer Security - ESORICS 2022, vol. 13556, pp. 574–594. Springer Nature Switzerland, Cham (2022).https://doi.org/10.1007/978-3-031-17143-7_28

28. Yoong, C.H., Palleti, V.R., Maiti, R.R., Silva, A., Poskitt, C.M.: Deriving invariant checkers for critical infrastructure using axiomatic design principles. Cybersecurity4(1), 1–24 (2021)

    Article  Google Scholar 

Download references