Pith. sign in

REVIEW 3 major objections 3 minor 48 references

Impact of Benign Connectivity Variations on Intrusion Detection for Encrypted OPC UA Traffic in Industrial Private 5G Networks

T0 review · 3 major / 3 minor · reviewed 2026-07-13 · grok-4.5

Challenge this review Re-run · record.json Download PDF Read on arXiv ↗ Review JSON

Pith's one-line read Benign 5G connectivity events raise false positives in ML IDS for encrypted OPC UA traffic.

desk verdict Abstract-only industrial measurement: benign private-5G connectivity events may raise ML-IDS false positives on encrypted OPC UA; claim is clear and useful if the full paper isolates the confound. read the letter →

arxiv 2607.09659 v1 pith:QHJ5GPL5 submitted 2026-07-10 cs.CR

Song Son Ha , Florian Foerster , Henry Beuster , Tim Kittel , Dominik Merli , Gerd Scholl This is my paper · ORCID
classification cs.CR
keywords intrusiondetectionencryptedtrafficOPCUAprivate5Gindustrialnetworksfalsepositivescontrolplanemachinelearning
verification ladder T0 review T1 audit T2 compute T3 formal

The pith

A machine-rendered reading of the paper's core claim, the machinery that carries it, and where it could break.

The reading

This paper argues that legitimate connectivity variations in industrial private 5G networks can drive noticeable false-positive activity in machine-learning intrusion detection systems that watch encrypted OPC UA traffic, even when no attacks are present. The authors show experimentally that elevated IDS anomaly scores often line up with control-plane activity linked to those everyday connectivity events. A sympathetic reader should care because factories increasingly rely on encrypted industrial protocols over private 5G and on ML-based monitors that only see traffic patterns; if ordinary network housekeeping looks like intrusion, operators will either ignore the IDS or drown in alerts. The work therefore presses the point that control-plane context must be taken into account when interpreting such detectors in real industrial 5G settings.

What carries the argument

The experimental linkage between benign private-5G connectivity events (and their associated control-plane activity) and spikes in ML-IDS anomaly scores on encrypted OPC UA traffic, used to quantify the false-positive impact under attack-free conditions.

What would settle it

A controlled re-run in which connectivity events are held constant while traffic volume and feature distributions are matched to the event periods; if false-positive rates and anomaly-score spikes still match those reported for the connectivity events, the claimed causal impact fails.

Watch

Extended reading notes

Core claim

Legitimate connectivity events in industrial private 5G networks can noticeably increase false-positive activity of ML-based IDS monitoring encrypted OPC UA traffic, and elevated IDS anomaly scores frequently coincide with periods of control-plane activity associated with those events.

Load-bearing premise

That the experimental setup truly isolates benign connectivity variations as the cause of the false-positive rise rather than traffic-volume shifts, feature-extractor artifacts, or imperfect attack-free labeling.

Editorial extensions

If this is right

  • ML IDS outputs for encrypted OPC UA over private 5G cannot be treated as pure attack indicators without control-plane context.
  • Operators who ignore CP activity risk alert fatigue or missed detections when real attacks coincide with connectivity changes.
  • IDS design for industrial 5G should incorporate or condition on control-plane signals to suppress benign-event false positives.
  • Evaluation of industrial IDS must include realistic private-5G connectivity dynamics, not only steady-state traffic.

Reading between the lines

Editorial extensions of the paper, not claims the author makes directly.

  • Feature sets that capture session setup or radio-state transitions may be especially sensitive to private-5G mobility and reattachment patterns.
  • Fusing lightweight control-plane telemetry with user-plane flow features could become a practical mitigation path for this class of false positives.
  • Similar effects may appear for other encrypted industrial protocols (e.g., MQTT-TLS, Modbus-TLS) whenever private 5G connectivity events reshape traffic statistics.
Share X Bluesky LinkedIn Reddit HN

Signed reviews

No signed human review yet.

Editorial analysis

A structured set of objections, weighed in public.

Desk editor's note, referee report, and a circularity audit.

Referee Report

3 major / 3 minor

Summary. The manuscript (available here only as an abstract) claims that legitimate connectivity events in industrial private 5G networks can noticeably raise false-positive activity of ML-based intrusion detection systems monitoring encrypted OPC UA traffic, even in the absence of attacks. It further asserts that elevated IDS anomaly scores frequently coincide with periods of control-plane activity associated with those benign events, and concludes that control-plane context should be considered when interpreting IDS outputs in such environments.

Significance. If the claimed experimental findings hold under a well-controlled design, the work would be practically relevant for industrial private-5G security: it would caution operators against treating ML-IDS alerts on encrypted OPC UA as attack-indicative without control-plane context, and would motivate CP-aware post-processing or feature design. The topic sits at a useful intersection of industrial OT protocols, private 5G, and encrypted-traffic IDS evaluation. Significance cannot be fully scored from the abstract alone, because effect sizes, baselines, and reproducibility artifacts are not visible.

major comments (3)
  1. Abstract: the central causal framing (“impact of benign connectivity variations”) and the claim that legitimate connectivity events “can noticeably increase false positive activity despite the absence of attacks” are load-bearing. With only the abstract available, there is no experimental design, feature set, ground-truth labeling protocol, traffic-volume or session-reestablishment controls, IDS model description, or quantitative FP metrics against which to verify that connectivity events—not confounds—drive the reported FP increase. This isolation is required for the claim as stated.
  2. Abstract: the second main claim—that elevated IDS anomaly scores “frequently coincide with periods of control-plane (CP) activity associated with these events”—is presented as more than temporal correlation. The abstract does not report coincidence rates, lag analysis, statistical tests, or a comparison against volume-matched non-CP periods. Without those (or equivalent) results in the full manuscript, the CP-context recommendation is under-supported relative to the strength of the wording.
  3. Abstract: “experimental results” are asserted without any visible quantitative anchors (dataset size, number of connectivity events, FP rate deltas, anomaly-score distributions, error bars, or baselines). For a results-driven empirical paper, these quantities are load-bearing for the “noticeably increase” and “frequently coincide” statements; their absence from the only available text prevents assessment of effect size and robustness.
minor comments (3)
  1. Abstract: expand or define “connectivity variations” and “connectivity events” on first use so readers can distinguish UE attach/detach, handover, PDU-session re-establishment, and radio-link recovery without the full text.
  2. Abstract: “ML-based IDSs” is left unspecified (supervised vs. unsupervised, flow vs. packet features, training regime). Even a one-phrase qualifier would help readers judge transferability.
  3. Abstract: the final sentence (“highlight the importance of considering CP context”) is a recommendation; if the full paper does not evaluate a CP-aware mitigation, consider softening to a finding rather than an operational prescription.

Circularity Check

0 steps flagged · score 0.0 of 10

Abstract-only empirical measurement study; no derivation chain, fitted-parameter predictions, or self-citation load-bearing arguments available to inspect.

full rationale

Only the abstract is available. It reports an experimental observation that legitimate connectivity events can increase false-positive activity of ML-based IDS on encrypted OPC UA traffic in industrial private 5G, and that elevated anomaly scores often coincide with associated control-plane activity. There are no equations, no claimed first-principles derivations, no fitted parameters presented as predictions, no uniqueness theorems, and no self-citations whose content can be checked. The abstract does not reduce any result to its inputs by construction. Residual experimental risks (e.g., how 'benign' is labeled, possible confounds with traffic volume) are ordinary validity concerns, not circularity of the kinds enumerated in the analyzer rules. Per the hard rules, an abstract-only empirical claim with no inspectable derivation chain scores 0; steps remain empty.

Assumptions & free parameters 0 free parameters · 2 assumptions · 0 invented entities

Abstract-only review: free parameters, axioms, and invented entities cannot be exhaustively extracted. The claim rests on standard domain assumptions that ML IDS operate on encrypted traffic features and that private-5G CP events are observable and labelable as benign. No new physical entities are introduced.

assumptions (2)
  • domain assumption ML-based IDS can be applied to encrypted OPC UA traffic using non-payload features and produce anomaly scores that are interpretable as attack indicators.
    Implicit throughout the abstract; without this, 'false positive activity' and 'anomaly scores' have no meaning in the encrypted setting.
  • domain assumption Observed connectivity events in the experimental private 5G setup are truly benign (no concurrent attacks) and their CP activity is correctly associated with IDS score elevations.
    Required for the causal claim that legitimate connectivity variations drive the false-positive increase.

how reviews work

0 comments
Cite this review

Pith. "Pith review of Impact of Benign Connectivity Variations on Intrusion Detection for Encrypted OPC UA Traffic in Industrial Private 5G Networks." pith.science (2026). https://pith.science/paper/QHJ5GPL5

@misc{pith2026260709659,
  author       = {Pith},
  title        = {Pith review of: Impact of Benign Connectivity Variations on Intrusion Detection for Encrypted OPC UA Traffic in Industrial Private 5G Networks},
  year         = {2026},
  howpublished = {\url{https://pith.science/paper/QHJ5GPL5}},
  note         = {Machine review of arXiv:2607.09659}
}
read the original abstract

Machine learning (ML)-based intrusion detection systems (IDSs) are increasingly used to monitor encrypted industrial communication. However, their behavior under realistic private 5G operating conditions remains insufficiently understood. This paper investigates the impact of benign connectivity variations on ML-based IDSs for encrypted Open Platform Communications Unified Architecture (OPC UA) traffic in industrial private 5G networks. Experimental results show that legitimate connectivity events can noticeably increase false positive activity despite the absence of attacks. Furthermore, elevated IDS anomaly scores frequently coincide with periods of control-plane (CP) activity associated with these events. The findings highlight the importance of considering CP context when interpreting IDS outputs in industrial private 5G environments.

Figures

Figures reproduced from arXiv: 2607.09659 by the authors.

Figure 1
Figure 1. Impact of Benign Connectivity Variations on FPR. [PITH_FULL_IMAGE:figures/full_fig_p005_1.png] view at source ↗
Figure 2
Figure 2. Temporal relationship between CP activity and IDS anomaly scores under benign connectivity variation [PITH_FULL_IMAGE:figures/full_fig_p005_2.png] view at source ↗

Discussion (0). Continue with ORCID to comment.

Reference graph

Works this paper leans on

48 extracted references · 11 canonical work pages

  1. [1]

    Encrypted network traffic analysis and classification utilizing machine learning

    Ibrahim Alwhbi, Cliff Zou, and Reem Alharbi. Encrypted network traffic analysis and classification utilizing machine learning. Sensors, 24: 0 3509, 05 2024. doi:10.3390/s24113509

    work page doi:10.3390/s24113509 2024

  2. [2]

    Monitoring encrypted communication with opc ua

    Toshiaki Honda, Yuki Shimazawa, Takashi Hamaguchi, and Yoshihiro Hashimoto. Monitoring encrypted communication with opc ua. International Journal of Service and Knowledge Management, 6 0 (2), 2022

    2022

  3. [4]

    An experimental study of machine learning-based intrusion detection for opc ua over industrial private 5g networks

    Song Son Ha, Kunal Singh, Florian Foerster, Henry Beuster, Tim Kittel, Dominik Merli, and Gerd Scholl. An experimental study of machine learning-based intrusion detection for opc ua over industrial private 5g networks. In 2026 IEEE 9th International Conference on Industrial Cyber-Physical Systems (ICPS), pages 1--8, 2026. doi:10.1109/ICPS70486.2026.11567982

    work page doi:10.1109/icps70486.2026.11567982 2026

  4. [6]

    Unsupervised graph-sequence anomaly detection for 5g core network control plane traffic

    Min Wang, Peng Li, Zhang Cheng, Wenmao Liu, Lei Nie, Haizhou Bao, Qin Liu, and Kai Zhang. Unsupervised graph-sequence anomaly detection for 5g core network control plane traffic. In 2023 IEEE 29th International Conference on Parallel and Distributed Systems (ICPADS), pages 1645--1652, 2023. doi:10.1109/ICPADS60453.2023.00230

    doi:10.1109/icpads60453.2023.00230 2023

  5. [7]

    Shyaa, Noor Farizah Ibrahim, Zurinahni Zainol, Rosni Abdullah, Mohammed Anbar, and Laith Alzubaidi

    Methaq A. Shyaa, Noor Farizah Ibrahim, Zurinahni Zainol, Rosni Abdullah, Mohammed Anbar, and Laith Alzubaidi. Evolving cybersecurity frontiers: A comprehensive survey on concept drift and feature dynamics aware machine and deep learning in intrusion detection systems. Engineering Applications of Artificial Intelligence, 137: 0 109143, 2024. doi:10.1016/j....

    work page doi:10.1016/j.engappai.2024.109143 2024

  6. [9]

    Testbed and Software Architecture for Enhancing Security in Industrial Private 5G Networks

    Song Son Ha, Florian Foerster, Thomas Robert Doebbert, Tim Kittel, Dominik Merli, and Gerd Scholl. Testbed and Software Architecture for Enhancing Security in Industrial Private 5G Networks . In 2025 IEEE 30th International Conference on Emerging Technologies and Factory Automation (ETFA) , pages 1--4, 2025. doi:10.1109/ETFA65518.2025.11205743

    doi:10.1109/etfa65518.2025.11205743 2025

  7. [10]

    Opc-ua exploitation framework

    Claroty Team82 . Opc-ua exploitation framework. Online repository, 2023. URL https://github.com/claroty/opcua-exploit-framework. Accessed: Dec. 2025

    2023

  8. [11]

    Encrypted Network Traffic Analysis and Classification Utilizing Machine Learning , volume =

    Alwhbi, Ibrahim and Zou, Cliff and Alharbi, Reem , year =. Encrypted Network Traffic Analysis and Classification Utilizing Machine Learning , volume =. Sensors , doi =

Show all 48 references
  1. [12]

    A survey on the handover management in 5G-NR cellular networks: aspects, approaches and challenges , volume =

    Haghrah, Amiraslan and Pourmohammad Abdollahi, Mehran and Azarhava, Hosein and Musevi Niya, Javad , year =. A survey on the handover management in 5G-NR cellular networks: aspects, approaches and challenges , volume =. EURASIP Journal on Wireless Communications and Networking , doi =

  2. [13]

    Electronics , VOLUME =

    Han, Gang and Zhang, Haohe and Zhang, Zhongliang and Ma, Yan and Yang, Tiantian , TITLE =. Electronics , VOLUME =. 2025 , NUMBER =

    2025

  3. [14]

    Using Anomaly Detection Techniques for Securing 5G Infrastructure and Applications , year=

    Priovolos, Athanasios and Lioprasitis, Dimitris and Gardikis, Georgios and Costicoglou, Socrates , booktitle=. Using Anomaly Detection Techniques for Securing 5G Infrastructure and Applications , year=

  4. [15]

    Alves and Mateus A.S.S

    Pedro V.A. Alves and Mateus A.S.S. Goldbarg and Wysterlânya K.P. Barros and Iago D. Rego and Vinícius J.M.T. Filho and Allan M. Martins and Vicente A. de Sousa Jr. and Ramon dos R. Fontes and Eduardo H. da S. Aranha and Augusto V. Neto and Marcelo A.C. Fernandes , keywords =. ...

    2023 doi

  5. [16]

    and Macedo, Daniel F

    Oliveira, Júnia Maísa and Almeida, Jônatan and De Britto e Silva, Erik and Rodrigues Moreira, Larissa Ferreira and Moreira, Rodrigo and Silva, Flávio O. and Macedo, Daniel F. and Nogueira, José Marcos , booktitle=. Anomaly Detection Employing a 5G Core Data Analytics Framework , year=

  6. [17]

    Sensors , VOLUME =

    Ghazi, Youness and Tabaa, Mohamed and Ennaji, Mohamed and Zaz, Ghita , TITLE =. Sensors , VOLUME =. 2025 , NUMBER =

    2025

  7. [18]

    Development of a monitoring system for encrypted data by OPC UA , year=

    Honda, Toshiaki and Shimazawa, Yuki and Hamaguchi, Takashi and Hashimoto, Yoshihiro , booktitle=. Development of a monitoring system for encrypted data by OPC UA , year=

  8. [19]

    Big Data and Cognitive Computing , VOLUME =

    Odarchenko, Roman and Iavich, Maksim and Iashvili, Giorgi and Fedushko, Solomiia and Syerov, Yuriy , TITLE =. Big Data and Cognitive Computing , VOLUME =. 2023 , NUMBER =

    2023

  9. [20]

    and Radunovic, Bozidar , title =

    Sun, Chuanhao and Pawar, Ujjwal and Khoja, Molham and Foukas, Xenofon and Marina, Mahesh K. and Radunovic, Bozidar , title =. Proceedings of the 30th Annual International Conference on Mobile Computing and Networking , pages =. 2024 , isbn =. doi:10.1145/3636534.3649380 , abstract =

    2024 doi

  10. [21]

    Descriptor: 5G Open Radio Access Network Multi-Modal Intrusion Detection Dataset (NetsLab-5GORAN-IDD) , year=

    Zadeh, Farah Abed and Civciss, Alan and Ravihansa, Vidura and Sandeepa, Chamara and Liyanage, Madhusanka , journal=. Descriptor: 5G Open Radio Access Network Multi-Modal Intrusion Detection Dataset (NetsLab-5GORAN-IDD) , year=

  11. [22]

    and Gan, Hongping , journal=

    Wu, Zhangfa and Li, Huifang and Hua, Yi and Tran, Nguyen H. and Gan, Hongping , journal=. Frequency-Domain Anomaly Detection for Encrypted Traffic in Industrial Control Systems , year=

  12. [23]

    Dual-Branch Transformer for Anomaly-Based Intrusion Detection from Multivariate KPIs in the 5G User Plane , year=

    Tian, Zixu and Kalidindi, Rishika Varma and Gurusamy, Mohan , booktitle=. Dual-Branch Transformer for Anomaly-Based Intrusion Detection from Multivariate KPIs in the 5G User Plane , year=

  13. [24]

    Computer Modeling in Engineering & Sciences , VOLUME =

    Min-Gyu Kim, Hwankuk Kim , TITLE =. Computer Modeling in Engineering & Sciences , VOLUME =. 2024 , NUMBER =

    2024

  14. [25]

    2025 , volume=

    Ha, Song Son and Foerster, Florian and Doebbert, Thomas Robert and Kittel, Tim and Merli, Dominik and Scholl, Gerd , booktitle=. 2025 , volume=

    2025

  15. [26]

    2023 , url =

    OPC-UA Exploitation Framework , howpublished =. 2023 , url =

    2023

  16. [27]

    Granomaly: A Framework for Anomaly Detection in 5G Core Network Control Plane Traffic with Temporal Graph Neural Networks , year=

    Fritz, Tobias and Schwankner, Alexander and Wissing, Jan-Hendrik and Buchta, Robin and Rodosek, Gabi Dreo , booktitle=. Granomaly: A Framework for Anomaly Detection in 5G Core Network Control Plane Traffic with Temporal Graph Neural Networks , year=

  17. [28]

    ADSeq-5GCN: Anomaly Detection from Network Traffic Sequences in 5G Core Network Control Plane , year=

    Tian, Zixu and Patil, Rajendra and Gurusamy, Mohan and McCloud, Joshua , booktitle=. ADSeq-5GCN: Anomaly Detection from Network Traffic Sequences in 5G Core Network Control Plane , year=

  18. [29]

    Anomaly Detection of 5G Control Plane Based on Hidden Semi-Markov Model , year=

    Lu, Miaoshun and Sun, Qian and Tian, Lin and Zhang, Qianyun , booktitle=. Anomaly Detection of 5G Control Plane Based on Hidden Semi-Markov Model , year=

  19. [30]

    UoCAD2: An unsupervised online contextual anomaly detection approach using optimized hyperparameters of RNNs for multivariate time series , journal =

    Aafan Ahmad Toor and Jia-Chun Lin and Ernst Gunnar Gran , keywords =. UoCAD2: An unsupervised online contextual anomaly detection approach using optimized hyperparameters of RNNs for multivariate time series , journal =. 2025 , issn =. doi:https://doi.org/10.1016/j.iot.2025.10...

    2025 doi

  20. [31]

    arXiv preprint arXiv:2505.01783 , year=

    Context-aware online conformal anomaly detection with prediction-powered data acquisition , author=. arXiv preprint arXiv:2505.01783 , year=

    arXiv

  21. [32]

    Learning Under Non-stationarity: Covariate Shift Adaptation by Importance Weighting

    Sugiyama, Masashi. Learning Under Non-stationarity: Covariate Shift Adaptation by Importance Weighting. Handbook of Computational Statistics: Concepts and Methods. 2012. doi:10.1007/978-3-642-21551-3_31

    2012 doi

  22. [33]

    Proceedings of the 34th International Conference on Machine Learning , pages =

    On Calibration of Modern Neural Networks , author =. Proceedings of the 34th International Conference on Machine Learning , pages =. 2017 , editor =

    2017

  23. [34]

    Artificial Intelligence-Based Anomaly Detection Technology over Encrypted Traffic: A Systematic Literature Review , year =

    Ji, Il Hwan and Lee, Ju Hyeon and Kang, Min Ji and Park, Woo Jin and Jeon, Seung Ho and Seo, Jung Taek , journal =. Artificial Intelligence-Based Anomaly Detection Technology over Encrypted Traffic: A Systematic Literature Review , year =. doi:10.3390/s24030898 , pubmedid =

    doi

  24. [35]

    and Ibrahim, Noor Farizah and Zainol, Zurinahni and Abdullah, Rosni and Anbar, Mohammed and Alzubaidi, Laith , title =

    Shyaa, Methaq A. and Ibrahim, Noor Farizah and Zainol, Zurinahni and Abdullah, Rosni and Anbar, Mohammed and Alzubaidi, Laith , title =. Engineering Applications of Artificial Intelligence , volume =. 2024 , doi =

    2024

  25. [36]

    An Experimental Study of Machine Learning-Based Intrusion Detection for OPC UA over Industrial Private 5G Networks , year=

    Ha, Song Son and Singh, Kunal and Foerster, Florian and Beuster, Henry and Kittel, Tim and Merli, Dominik and Scholl, Gerd , booktitle=. An Experimental Study of Machine Learning-Based Intrusion Detection for OPC UA over Industrial Private 5G Networks , year=

  26. [37]

    OPC UA security analysis , year =

    vom Dorp, Johannes and Merschjohann, Sven and Meier, David and Patzer, Florian and Karch, Markus and Haas, Christian , journal =. OPC UA security analysis , year =

  27. [38]

    Monitoring encrypted communication with OPC UA , year =

    Honda, Toshiaki and Shimazawa, Yuki and Hamaguchi, Takashi and Hashimoto, Yoshihiro , journal =. Monitoring encrypted communication with OPC UA , year =

  28. [39]

    Combining Network Data Analytics Function and Machine Learning for Abnormal Traffic Detection in Beyond 5G , year =

    Mekrache, Abdelkader and Boutiba, Karim and Ksentini, Adlen , booktitle =. Combining Network Data Analytics Function and Machine Learning for Abnormal Traffic Detection in Beyond 5G , year =. doi:10.1109/GLOBECOM54140.2023.10436766 , keywords =

    2023 doi

  29. [41]

    Machine Learning-Powered Encrypted Network Traffic Analysis: A Comprehensive Survey , year =

    Shen, Meng and Ye, Ke and Liu, Xingtong and Zhu, Liehuang and Kang, Jiawen and Yu, Shui and Li, Qi and Xu, Ke , journal =. Machine Learning-Powered Encrypted Network Traffic Analysis: A Comprehensive Survey , year =. doi:10.1109/COMST.2022.3208196 , keywords =

    2022 doi

  30. [43]

    Unsupervised Graph-Sequence Anomaly Detection for 5G Core Network Control Plane Traffic , year=

    Wang, Min and Li, Peng and Cheng, Zhang and Liu, Wenmao and Nie, Lei and Bao, Haizhou and Liu, Qin and Zhang, Kai , booktitle=. Unsupervised Graph-Sequence Anomaly Detection for 5G Core Network Control Plane Traffic , year=

  31. [45]

    2026 , eprint=

    An Experimental Study of Machine Learning-Based Intrusion Detection for OPC UA over Industrial Private 5G Networks , author=. 2026 , eprint=

    2026

  32. [46]

    Federal Office for Information Security (BSI) , year=

    OPC UA security analysis , author=. Federal Office for Information Security (BSI) , year=

  33. [47]

    International Journal of Service and Knowledge Management , volume=

    Monitoring encrypted communication with OPC UA , author=. International Journal of Service and Knowledge Management , volume=

  34. [48]

    Combining Network Data Analytics Function and Machine Learning for Abnormal Traffic Detection in Beyond 5G , year=

    Mekrache, Abdelkader and Boutiba, Karim and Ksentini, Adlen , booktitle=. Combining Network Data Analytics Function and Machine Learning for Abnormal Traffic Detection in Beyond 5G , year=

  35. [49]

    Sensors , VOLUME =

    Ji, Il Hwan and Lee, Ju Hyeon and Kang, Min Ji and Park, Woo Jin and Jeon, Seung Ho and Seo, Jung Taek , TITLE =. Sensors , VOLUME =. 2024 , NUMBER =

    2024

  36. [50]

    Information Hiding in Industrial Control Systems: An OPC UA based Supply Chain Attack and its Detection , year =

    Hildebrandt, Mario and Lamsh\". Information Hiding in Industrial Control Systems: An OPC UA based Supply Chain Attack and its Detection , year =. Proceedings of the 2020 ACM Workshop on Information Hiding and Multimedia Security , pages =. doi:10.1145/3369412.3395068 , abstract =

    2020 doi

  37. [51]

    Machine Learning-Powered Encrypted Network Traffic Analysis: A Comprehensive Survey , year=

    Shen, Meng and Ye, Ke and Liu, Xingtong and Zhu, Liehuang and Kang, Jiawen and Yu, Shui and Li, Qi and Xu, Ke , journal=. Machine Learning-Powered Encrypted Network Traffic Analysis: A Comprehensive Survey , year=

  38. [52]

    Computational Intelligence and Neuroscience , volume =

    Long, Gang and Zhang, Zhaoxin , title =. Computational Intelligence and Neuroscience , volume =. doi:https://doi.org/10.1155/2023/3316642 , url =. https://onlinelibrary.wiley.com/doi/pdf/10.1155/2023/3316642 , abstract =

    2023 doi

  39. [53]

    Computational Intelligence and Neuroscience , volume=

    Deep encrypted traffic detection: An anomaly detection framework for encryption traffic based on parallel automatic feature extraction , author=. Computational Intelligence and Neuroscience , volume=. 2023 , publisher=

    2023

  40. [54]

    Context-aware anomaly detection by community detection in the Internet of Things , journal =

    Fatemeh Stodt and Christoph Reich and Fabrice Theoleyre , keywords =. Context-aware anomaly detection by community detection in the Internet of Things , journal =. 2026 , issn =. doi:https://doi.org/10.1016/j.comcom.2026.108414 , url =

    2026 doi

Pith tools

Reviewed July 13, 2026 · model on record in the stance chip above.