Adapting Bro into SCADA: building a specification-based intrusion detection system for the DNP3 protocol
Specification-based anomaly detection: a new approach for detecting network intrusions