# Anomaly Detection Method for Unknown Protocols in a Power Plant ICS Network with Decision Tree
## 5 Conclusions
(2018)_ _[PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON] Gradient band-based adversarial training for generalized attack immunity of A3C path finding._ arXiv **2018**, arXiv:1807.06752._
* _Scikit-Learn (2023)_ _Scikit-Learn (Choosing the Right Estimator). Available online: [[https://scikit-learn.org/stable/tutorial/machine_learning_map/index.html](https://scikit-learn.org/stable/tutorial/machine_learning_map/index.html)]([https://scikit-learn.org/stable/tutorial/machine_learning_map/index.html](https://scikit-learn.org/stable/tutorial/machine_learning_map/index.html)) (accessed on 2 February 2023)._
* _[PERSON] (2010)_ _[PERSON] SinFP, unification of active and passive operating system fingerprinting._ J. Comput. Virol. **2010**, 6, 197-205. [CrossRef]_
* _[PERSON] (2004)_ _[PERSON] A robust classifier for passive TCP/IP fingerprinting. In Proceedings of the Passive and Active Network Measurement: 5 th International Workshop, PAM 2004, Juan-Les-Pins, France, 19-20 April 2004; pp. 158-167._
* _[PERSON] et al. (2004)_ _[PERSON]; [PERSON] Passive visual fingerprinting of network attack tool. In Proceedings of the VizSEC/DMSEC '04: 2004 ACM Workshop on Visualization and Data Mining for Computer Security, Washington, DC, USA, 29 October 2004; pp. 45-54._
* _[PERSON] et al. (2018)_ _[PERSON]; [PERSON] Passive OS fingerprinting prototype demonstration. In Proceedings of the NOMS 2018--2018 IEEE/IFIP Network Operations and Management Symposium, Taipei, Taiwan, 23-27 April 2018; pp. 1-2._
* _[PERSON] et al. (2009)_ _[PERSON]; [PERSON]; [PERSON] Flow whitelisting in SCADA networks._ Int. J. Crit. Infrastruct. Prot. **2013**, 6, 150-158. [CrossRef]_
* _[PERSON] (2009)_ _[PERSON] The promise of whitelisting._ Netw. Secur. **2009**, 2009, 4-6. [CrossRef]_
* _[PERSON] et al. (2008)_ _[PERSON]; [PERSON]; [PERSON] The Effectiveness of Whitelisting: A User-Study. In Proceedings of the CEAS 2008: The Fifth Conference on Email and Anti-Spam, Mountain View, CA, USA, 21-22 August 2008; pp. 1-10._
* _[PERSON] et al. (2012)_ _[PERSON]; [PERSON]; [PERSON]. Application whitelisting: Approaches and challenges._ Int. J. Comput. Sci. Eng. Inf. Technol. **2012**, 2, 13-18. [CrossRef]_
* _[PERSON] et al. (2020)_ _[PERSON] [PERSON]; [PERSON] [PERSON]; [PERSON] [PERSON]; [PERSON], [PERSON] Madics: A methodology for anomaly detection in industrial control systems._ Symmetry **2020**, 12, 1583. [CrossRef]_
* _[PERSON] et al. (2021)_ _[PERSON]; [PERSON]; [PERSON]; [PERSON] [PERSON] A machine learning approach for anomaly detection in industrial control systems based on measurement data._ Electronics **2021**, 10, 407. [CrossRef]_
* _[PERSON] et al. (2021)_ _[PERSON]; [PERSON] [PERSON]; [PERSON] DAICS: A deep learning solution for anomaly detection in industrial control systems._ IEEE Trans. Emerg. Top. Comput. **2021**, 10, 1117-1129. [CrossRef]_
* _[PERSON] et al. (2020)_ _[PERSON]; [PERSON]; [PERSON]; [PERSON] Anomaly detection for industrial control system based on autoencoder neural network._ Wirel. Commun. Mob. Comput. **2020**, _2020, 2899726. [CrossRef]_
* _[PERSON] et al. (2022)_ _[PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON] An Intrusion Detection Method for Industrial Control System Based on Machine Learning._ Information **2022**, _13, 322. [CrossRef]_
* _[PERSON] and [PERSON] (2010)_ _[PERSON]; [PERSON] Outside the closed world: On using machine learning for network intrusion detection. In Proceedings of the 2010 IEEE Symposium on Security and Privacy, NW Washington, DC, USA, 16-19 May 2010; pp. 305-316._
* _[PERSON] Theoretical analysis of an alphabetic confusion matrix._ Percpt. Psychophys. **1971**, 9, 40-50. [CrossRef]_
* _[PERSON] et al. (2011)_ _[PERSON]; [PERSON]; [PERSON]; [PERSON] Confusion matrix-based feature selection. In Proceedings of the MAICS 2011: 22 nd Midwest Artificial Intelligence and Cognitive Science Conference, Cincinnati, OH, USA, 16-17 April 2011; pp.