跳到正文
研踪PaperTrail

YOUR RESEARCH, IN SIGHT

让下一篇重要论文,不再错过。

覆盖计算机全学科,以 AI 为快捷入口。关注方向、作者和关键词,把发现变成持续的研究积累。

部分采集异常
正在读取账号与研究记录…

全站更新概况

+3新增论文
+3其中 AI 相关
+1已有论文修订
+100新增 AI 导读

arXiv 最近完成扫描:2026-11-12 15:11 · 全站最近入库:2026-11-12 06:37各信源进度 →

统计口径与数据新鲜度

统计 2026-11-11 15:33 — 2026-11-12 15:33(北京时间) · 点击数字查看对应简报;AI 相关包含在新增论文内。

最近完成检查:2026-11-12 15:11最近发现新增版本:2026-11-12 06:37库内论文最新更新时间:2026-11-11 08:00

每分钟刷新已保存的数据。空检查不代表采集异常;新收录可能包含历史论文。AI 导读按新增版本计数。

21,675 已收录论文18,323 AI 相关6,056 有修订112 HF 社区发现

浏览论文库

时间范围跟随排序:版本更新、本站收录或首次发表。最新收录可能包含历史论文。部分信源异常,查看状态 →

找到 1 篇论文 · 按版本更新时间排序上轮扫描起点 2026-11-12 15:08(北京时间)
新论文 · v1arXiv:2611.13942

Data4Cyber: Labeled Cyber-Physical Datasets for Distribution-Grid Management Systems Under Representative OT Attacks

Ömer Sen, Lennart Bader, Marawan Emara, Martin Serror, Benedikt Schwalm, Junichi Tsurumi, Tatsumi Oba, Tomohiro Izawa 等 9 位作者

原文摘要

Cyberattacks against power systems increasingly exploit industrial communication and control dependencies arising from distributed energy resources (DER), remote management, and market-based incentives. Progress on intrusion detection is constrained by a lack of public datasets that align operational technology (OT) network telemetry with physical measurements and control context. Data4Cyber is a labeled cyber-physical dataset recorded in a laboratory distribution management system (DMS) for self-consumption optimization with photovoltaic generation, battery storage, controllable loads, and substation metering. It captures synchronized process measurements, controller context, price incentives, and packet captures (Modbus/TCP and MQTT) across one benign baseline and six attack scenarios spanning protocol-semantic Modbus manipulation, man-in-the-middle (MitM) false-data injection, and MQTT price manipulation. Its fixed 1 s time base, phase-resolved labels, and state-oriented representation support temporally blocked stateful-detector evaluation. Baseline results show that high recall alone is insufficient: several detectors achieve sensitivity through alarm saturation. Context-driven attacks require process-aware interpretation rather than single-channel thresholding.

cs.CR