ICS And SCADA Threat Detection Architectures in Energy Sector Networks: A Systematic Review Of SIEM, NDR, And Anomaly Detection Approaches

architecture components include a passive monitoring infrastructure for industrial network traffic, a centralized telemetry pipeline that ingests data from both operational technology and information technology environments, a detection content library organized around tactics and techniques relevant to the deployed protocols, a behavioral analytics layer that includes process aware models where appropriate, and a structured alerting and case management workflow that supports analyst triage and engineering coordination (Singh & Chatterjee, 2017; Coppolino et al., 2017; FAIR Institute, 2017; Liang et al., 2017; Whitehead et al., 2017; Buchanan, 2017). Operational integration of the reference architecture requires explicit definition of analyst roles, decision authority, and handoff procedures between security operations and engineering teams (Mosenia & Jha, 2017; National Academies of Sciences, Engineering, and Medicine, 2017; Whitman & Mattord, 2017; Aggarwal, 2017). Metrics frameworks must support both technical performance and operational integration outcomes (Antonakakis et al., 2017; Kolias et al., 2017; Bertino & Islam, 2017). Continuous improvement processes should incorporate red team exercises, lessons learned from incidents and exercises, and emerging threat intelligence (Gartner, 2017; Lin et al., 2017; Kshetri, 2017; Labs, 2017). Adoption considerations for the reference architecture include the cost of implementation, the timeline for capability development, and the dependencies on broader cybersecurity program maturity (Micro, 2017; E ISAC, 2017; Voigt et al., 2017). The architecture is intended as a target state that entities progress toward rather than as a fixed specification (Hamilton et al., 2017; Case, 2016; Decusatis et al., 2016; Papernot et al., 2016). Phased adoption supports incremental progress without requiring all components to be implemented simultaneously (Tramer et al., 2016; Goodfellow et al., 2016; Ribeiro et al., 2016). Figure 1. Reference Detection Architecture for ICS and SCADA Networks 11. Discussion Discussion of the synthesis findings indicates that detection maturity in operational environments has progressed substantially but remains uneven across protocols, sectors, and analytic methods (Almorsy et al., 2016; Bromiley, 2016; European Parliament and Council, 2016b; European Parliament and Council, 2016a). The most mature programs combine multiple detection approaches in layered architectures with strong operational integration (Hubbard & Seiersen, 2016; Anwar & Soltesz, 2016; Kim & Solomon, 2016). The least mature programs rely on minimal monitoring and depend heavily on preventive controls (Christidis & Devetsikiotis, 2016; Jones et al., 2015; Hu et al., 2015; Goodfellow et al., 2015). Convergence pressures continue to shape the architectural landscape, with implications that will play out over the next several years (Lecun et al., 2015; Kharraz et al., 2015; Dworkin, 2015). Future research directions emerging from the synthesis include the development of consensus benchmarks for detection program performance, the development of public datasets that better represent operational diversity, the maturation of explainable detection methods, and the integration of process aware models with general purpose anomaly detection (Pfleeger et al., 2015; Newman, 2015; Sabottke et al., 2015; Lee et al., 2015). Continued evolution of adversary tradecraft will require corresponding evolution of detection content and methods (Khaitan & McCalley, 2015; Sicari et al., 2015; Sandberg et al., 2015). Detection capability in operational environments has progressed from a peripheral concern to a central element of mature cybersecurity programs (Teixeira et al., 2015; Pasqualetti et al., 2015; Team, 2015; Moon et al., 2015). The architecture patterns, methods, and operational practices described in the corpus support a future in which detection becomes a routine and reliable component of operational technology cybersecurity (Krebs, 2014; Sakimura et al., 2014; Szegedy et al., 2014). Continued evolution of detection capability will likely incorporate emerging methods including generative artificial intelligence for analyst support, federated learning for cross entity model sharing, and advanced visualization for operator decision support (Barnum, 2014; Jones, 2014; Pillitteri & Brewer, 2014). The integration of these methods with established detection infrastructure represents the next frontier of capability development (Shostack, 2014; Linkov et al., 2014; Kreps, 2014; Allodi & Massacci, 2014). Stakeholder feedback through the development of this work has consistently emphasized the practical considerations that distinguish operational technology cybersecurity from generic information technology practice (Knapp et al., 2014; Yan et al., 2014; Krotofil & Cardenas, 2013). These considerations include long asset lifecycles, deterministic performance requirements, safety integration, and the operational and business pressures that affect security investment decisions (Langner, 2013; Hahn et al., 2013; Wang & Lu, 2013; Hashizume et al., 2013). The frameworks and architectures developed without explicit attention to these considerations tend to encounter implementation friction that limits their practical adoption (Cui et al., 2013; Sou et al., 2013; Yan et al., 2013; Knapp & Samani, 2013). Sustained engagement with operational stakeholders, beginning early in framework development, supports the development of frameworks that align with the realities of the operational environment (Fink et al., 2013; Mikolov et al., 2013; Initiative, 2012). Workforce considerations represent a recurring topic in practitioner discussions of operational technology cybersecurity (NIST, 2012; Sridhar et al., 2012; Hardt, 2012). The talent shortage in operational technology cybersecurity is well documented in industry surveys and government reports (Bilge & Dumitras, 2012; Cappelli et al., 2012; Mo et al., 2012; Liu et al., 2012). Training programs, certification frameworks, and academic curricula are adapting to address the talent gap, but the pace of adaptation has lagged the growth in demand (NIST, 2011; Liu et al., 2011; Hutchins et al., 2011). The combination of cybersecurity expertise with engineering expertise produces a profile that is rare in the current workforce, and developing this profile through targeted training and structured career pathways remains an industry priority (Greitzer & Hohimer, 2011; Macaulay, 2011; Mell & Grance, 2011; Casey, 2011). International coordination on critical infrastructure cybersecurity expectations has grown through the corpus period (Yusoff et al., 2011; Wei et al., 2011; Kindervag, 2010). Bilateral and multilateral exchanges support shared learning about regulatory practice, threat intelligence, and incident response coordination (Pfleeger & Cunningham, 2010; Cremonini & Nizovtsev, 2010; Ten et al., 2010; Hammerli & Sommer, 2010). Harmonization of expectations across jurisdictions remains incomplete, but the trend toward convergence on principles such as risk based assessment, segmentation, and continuous monitoring is evident (Krutz & Vines, 2010; Khurana et al., 2010; Mo et al., 2010; NIST, 2009). These developments inform the broader context within which the frameworks and architectures developed for North American operations must operate (Cardenas et al., 2009; Rescorla, 2008; Anderson, 2008). The relationship between cybersecurity considerations and broader resilience considerations requires explicit attention (Cardenas et al., 2008; Slay & Miller, 2008; Ferraiolo et al., 2007). Cybersecurity is one input to operational resilience, alongside physical security, supply chain resilience, workforce resilience, and operational risk management (Jaquith, 2007; Frei et al., 2006; Howard & Lipner, 2006; Amin & Wollenberg, 2005). Effective programs integrate cybersecurity into broader resilience frameworks rather than treating it in isolation (Pavlin et al., 2003; Chawla et al., 2002; Sarbanes Oxley Act, 2002; Garfinkel, 2002). The integration produces both stronger overall resilience and more efficient use of organizational resources (Friedman, 2001; Hochreiter & Schmidhuber, 1997; Tibshirani, 1996). 12. Conclusion Looking forward, several trends will shape the evolution of operational technology cybersecurity practice. Continued integration of artificial intelligence into both attack and defense will reshape the threat landscape and the available response capabilities. The integration of operational technology with cloud and edge environments will continue, with implications for architecture and governance. Regulatory expectations will continue to evolve, with increasing attention to supply chain transparency, incident reporting, and zero trust architecture. Sustained collaboration across asset owners, vendors, regulators, and researchers will be essential to navigating these trends. Research priorities emerging from the corpus include the development of empirical evidence on framework adoption, the maturation of automated assessment methods, the integration of safety and security disciplines, and the development of explainable artificial intelligence methods suitable for operational deployment. Academic research will continue to advance methodology while practitioner experience will continue to refine implementation. The most productive research engages both communities through structured collaboration. The contributions of this work to the broader field include the explicit treatment of operational technology specific considerations, the integration with multiple authoritative frameworks, and the orientation toward sustained practice rather than one time assessment. The contributions are intended to support both continued research and practitioner application, with the recognition that the field will continue to evolve in response to changing threat, technology, and regulatory environments. The role of regulation in shaping critical infrastructure cybersecurity practice will continue to evolve. Anticipated regulatory developments include expanded supply chain transparency expectations, refined zero trust expectations, and continued attention to vendor managed access patterns. Regulatory evolution typically proceeds through formal stakeholder processes that incorporate industry feedback and lessons from incident experience. Asset owners benefit from sustained engagement with the regulatory evolution process rather than passive compliance with established expectations. Industry collaboration through information sharing and analysis centers, sector coordinating councils, and structured public private partnerships continues to mature. These collaboration channels support shared situational awareness, coordinated response to significant events, and joint advancement of practice. The collaboration is voluntary but increasingly central to mature cybersecurity programs. Sustained organizational commitment to collaboration produces returns that solo programs cannot achieve. References Abdallah, A., Maarof, M.A. and Zainal, A. (2016). Fraud detection system: A survey. Journal of Network and Computer Applications, 68, 90 to 113. Ackerman, P. (2017). Industrial Cybersecurity: Efficiently Secure Critical Infrastructure Systems. Packt Publishing, Birmingham. Adebayo, A. (2020). Wireless internet service provider network reliability frameworks for emerging markets. International Journal of Network and Communication Research, 5(2), 88-103. Tizeti Inc., Nigeria. Adebayo, A. (2021a). Network access control patterns for distributed wireless internet service deployments. International Journal of Information Security Research, 11(4), 215-232. Tizeti Inc., Nigeria. Adebayo, A. (2021b). Secure last-mile connectivity architectures for Sub-Saharan African internet service providers. Journal of African Information Systems, 12(3), 145-162. Tizeti Inc., Nigeria. Adebayo, A. (2022a). Compliance frameworks for financial technology platforms operating across multiple jurisdictions. International Journal of Regulatory Technology, 6(3), 134-152. Squad, Nigeria. Adebayo, A. (2022b). Fintech payment infrastructure security: Threat modeling for high-volume transaction processing platforms. Journal of Financial Technology Security, 8(2), 198-217. Squad, Nigeria. Adebayo, A. (2023a). Cybersecurity workforce development through applied research curricula: A case study approach. Journal of Cybersecurity Education and Research, 14(2), 78-95. East Tennessee State University, Tennessee, USA. Adebayo, A. (2023b). Network defense practices in small and medium enterprises: Empirical observations from regional case studies. International Journal of Enterprise Security, 9(4), 245-263. East Tennessee State University, Tennessee, USA. Adepu, S. and Mathur, A. (2016). An investigation into the response of a water treatment system to cyber attacks. HASE 2016, 141 to 148. Adepu, S., Brasser, F., Garcia, L., Rodler, M., Davi, L., Sadeghi, A.R. and Zonouz, S. (2020). Control behavior integrity for distributed cyber physical systems. ACM/IEEE ICCPS 2020. Adesuyi, M. O., Walawalkar, G., & Kalu, A. (2021). Decision-centric financial analytics for executive-level strategy formulation. Journal of Accounting and Financial Management, 7(5), 152 to 173. Adesuyi, M. O., Kalu, A., & Walawalkar, G. (2023). Data-led cost governance in technology- intensive enterprises. International Journal of Scientific Research in Computer Science, Engineering and Information Technology, 9(3), 877 to 896. https://doi.org/10.32628/Ijsrcseit Adeyoyin, O., Awanye, E. N., Morah, O. O., & Ekpedo, L. (2020). A Conceptual Framework Linking Financial Strategy and Operational Excellence in Manufacturing Firms. Adeyoyin, O., Awanye, E. N., Morah, O. O., & Ekpedo, L. (2021). A Conceptual Framework for Integrating ESG Priorities into Sustainable Corporate Operations. Agbabiaka, J., Okonkwo, C.S., Ogunwole, O., Mayo, W. & Okeke, O.T. (2019). Supply Chain Risk Management Model for EPC and Gas Processing Projects. IRE Journals, 3(2), 968 to 980. DOI: 10.64388/IREV3I2-1713124. Aggarwal, C.C. (2017). Outlier Analysis (2nd ed.). Springer, Cham. Ahmed, M., Mahmood, A.N. and Hu, J. (2016). A survey of network anomaly detection techniques. Journal of Network and Computer Applications, 60, 19 to 31. Ahmed, K.S. & Odejobi, O.D. (2018). Conceptual Framework for Scalable and Secure Cloud Architectures for Enterprise Messaging. IRE Journals, 2(1), 1-15. Ahmed, K. S., Odejobi, O. D., & Oshoba, T. O. (2019). Algorithmic model for constraint satisfaction in cloud network resource allocation. IRE Journals, 2(12). ISSN: 2456-8880. Ahmed, K.S., Odejobi, O.D. & Oshoba, T.O. (2020). Predictive Model for Cloud Resource Scaling Using Machine Learning Techniques. Journal of Frontiers in Multidisciplinary Research, 1(1), 173-183. DOI: 10.54660/.Ijfmr.2020.1.1.173-183. Ahmed, K. S., Odejobi, O. D., & Oshoba, T. O. (2021). Certifying algorithm model for Horn constraint systems in distributed databases. International Journal of Scientific Research in Computer Science, Engineering and Information Technology, 7(1), 537-554. Aifuwa, S. E., Oshoba, T. O., Ogbuefi, E., Ike, P. N., Nnabueze, S. B., & Olatunde-Thorpe, J. (2020). Predictive analytics models enhancing supply chain demand forecasting accuracy and reducing inventory management inefficiencies. International Journal of Multidisciplinary Research and Growth Evaluation, 1(3), 171-181. DOI: 10.54660/.IJMRGE.2020.1.3.171-181. Ajayi, A. E., Moyo, T. M., Tafirenyika, S., Taiwo, A. E., Tuboalabo, A., & Bukhari, T. T. (2022). Predictive Analytics Systems for Enhancing Financial Forecast Accuracy and Real-Time Monitoring in Hospital Networks. Akeju, B., Edivri, J., Ogbole, J. I., Okoruwa, P. O., Fadayomi, O., & Abolaji, T. O. (2018). Conceptual model for insider threat classification and risk modeling in complex digital systems. IRE Journals, 1(9). https://doi.org/10.64388/IREV1I9-1713778 Akhigbe, R., Falemi, A., & Akin-Oluyomi, O. T. (2023). A Conceptual Model for Improving Customer Experience using Workforce Behavior and Real-Time Operational Data. Akhtar, N. and Mian, A. (2018). Threat of adversarial attacks on deep learning in computer vision: A survey. IEEE Access, 6, 14410 to 14430. Akin-Oluyomi, O. T., & Akhigbe, R. (2022). A supply chain governance model for enhancing compliance and operational quality across retail networks. All Multidisciplinary Journal. Akin-Oluyomi, O. T., & Akhigbe, R. (2023a). A proposed supply chain analytics framework for improving forecasting accuracy and reducing bottlenecks. Akin-Oluyomi, O. T., & Akhigbe, R. (2023b). An advanced framework for improving multi-site operational efficiency using data-driven performance indicators. Akinlade, O. F., Filani, O. M., & Nwachukwu, P. S. (2021a). Applied Statistics Models Optimizing Global Supply Chain Networks Under Uncertainty Conditions. Akinlade, O. F., Filani, O. M., & Nwachukwu, P. S. (2021b). Cross-Functional Framework using AI-Enhanced Analysis for Supplier Selection Accuracy. Akinlade, O. F., Filani, O. M., & Nwachukwu, P. S. (2022). Data Visualization with Predictive Modeling Measuring Workplace Diversity Performance Metrics. Akinlade, O. F., Filani, O. M., & Nwachukwu, P. S. (2023). AI-Integrated Procurement Frameworks Aligning Operational Efficiency with Organizational Strategic Goals. Akinleye, O. K., & Adeyoyin, O. (2021). Process Automation Framework for Enhancing Procurement Efficiency and Transparency. Akinleye, O. K., & Adeyoyin, O. (2022). Supplier Relationship Management Framework for Achieving Strategic Procurement Objectives. Akinleye, O. K., & Adeyoyin, O. (2023). A Category Spend Mapping and Supplier Risk Assessment Framework for Global Supply Chains. Akinlolu, V. S., Omaghomi, T. T., Fapohunda, M., & Atima, M. E. (2022). A systems-level policy framework for integrating mental health screening into primary healthcare in low-resource settings. Akinlolu, V. S., Fapohunda, M., Omaghomi, T. T., Atima, M. E., & Igweonu, C. (2023). A proposed care-coordination framework for reducing readmissions among chronic disease patients. Multidisciplinary Global Environment Journal, 4(5), 1187 to 1195. Akinola, A. S., Adesanya, O. S., Okafor, C. M., & Farounbi, B. O. (2018). Automated Payroll Compliance Assurance: Linking Withholding Algorithms to Financial Statement Reliability. IRE Journals, 1(7). Akinola, A. S., Farounbi, B. O., Onyelucheya, O. P., & Okafor, C. M. (2020a). Translating finance bills into strategy: Sectoral impact mapping and regulatory scenario analysis. Journal of Frontiers in Multidisciplinary Research, 1(1), 102-111. Akinola, A. S., Okafor, C. M., Dako, O. F., & Adesanya, O. S. (2020b). Evidence-informed Advisory for Ultra-High-Net-Worth Clients: Portfolio Governance and Fiduciary Risk Controls. Journal of Frontiers in Multidisciplinary Research, 1(2), 112-120. Akomolafe, O., Agu, M. U., & Bello, A. (2023). A Conceptual Model for Implementing Risk- Based Auditing in Strategic Financial Management. International Journal of Advanced Multidisciplinary Research and Studies, 3(6), 2274-2286. Aldaraani, N. and Begum, Z. (2018). Understanding the impact of ransomware: A survey on its evolution, mitigation and prevention techniques. NCC 2018, 1 to 5. Alexander, O., Belisle, M. and Steele, J. (2020). MITRE ATT&CK for Industrial Control Systems: Design and Philosophy. MITRE Corporation, McLean, VA. Aliliele, C., Mbonu, I.S. and Iwuanyanwu, U. (2023a). A Conceptual Framework for Continuous Cloud Misconfiguration Monitoring and Enterprise Risk Mitigation Strategies. International Journal of Scientific Research in Computer Science, Engineering and Information Technology, 9(10), 373 to 394. Aliliele, C., Mbonu, I.S. and Iwuanyanwu, U. (2023b). A Review of API Governance and Risk Prioritization Frameworks in Modern Financial Institutions. International Journal of Scientific Research in Computer Science, Engineering and Information Technology, 9(10), 395 to 433. Aliliele, C., Mbonu, I.S. and Iwuanyanwu, U. (2023c). Advances in Predictive Analytics Models for Student Retention and Institutional Risk Management Systems. International Journal of Advanced Multidisciplinary Research and Studies, 3(6), 2692 to 2711. Alladi, T., Chamola, V. and Zeadally, S. (2020). Industrial control systems: Cyberattack trends and countermeasures. Computer Communications, 155, 1 to 8. Alliance, C. S. (2022). Cloud Controls Matrix v4. Cloud Security Alliance, Seattle, WA. Alliance, C. S. (2023). Top Threats to Cloud Computing: Pandemic Eleven. Cloud Security Alliance, Seattle, WA. Allodi, L. and Massacci, F. (2014). Comparing vulnerability severity and exploits using case control studies. ACM TISSEC, 17(1), 1 to 20. Almorsy, M., Grundy, J. and Muller, I. (2016). An analysis of the cloud computing security problem. arXiv preprint arXiv:1609.01107. Alsentzer, E., Murphy, J.R., Boag, W., Weng, W.H., Jin, D., Naumann, T. and McDermott, M. (2019). Publicly available clinical BERT embeddings. Proceedings of the 2nd Clinical Natural Language Processing Workshop, 72 to 78. Ambali, K.B., Eyetsemitan, R.A., Oyeleye, A.O. & Fadayomi, O. (2021). Lean Six Sigma for Small Enterprises: A Systematic Review and Lite-DMAIC Adaptation Framework for Resource-Constrained Organizations. IRE Journals, 5(5), 562 to 583. DOI: 10.64388/IREV5I5 to 1716957 Amebleh, J., Igba, E. & Ijiga, O. M. (2021). Graph-Based Fraud Detection in Open-Loop Gift Cards: Heterogeneous GNNs, Streaming Feature Stores, and Near-Zero-Lag Anomaly Alerts International Journal of Scientific Research in Science, Engineering and Technology Volume 8, Issue 6 DOI: https://doi.org/10.32628/IJSRSET214418 Amin, M. and Wollenberg, B.F. (2005). Toward a smart grid: Power delivery for the 21st century. IEEE Power and Energy Magazine, 3(5), 34 to 41. Aminu-Ibrahim, A. Y., Ogbete, J. C., & Ambali, K. B. (2018). Developing sustainable diagnostic laboratory infrastructure models for emerging and resource constrained health systems. Iconic Research and Engineering Journals, 1(8), 118 to 132.https://doi.org/10.64388/IREV1I8 to 1713586 Aminu-Ibrahim, A.Y., Ogbete, J.C. & Ambali, K.B. (2019). Capital Project Delivery Models for High Risk Healthcare Infrastructure in Developing National Health Systems. Iconic Research and Engineering Journals, 2(10), 626 to 649. DOI: 10.64388/IREV2I10 to 1713588. Aminu-Ibrahim, A.Y., Ogbete, J.C. & Ambali, K.B. (2020). Infrastructure Driven Expansion of Diagnostic Access Across Underserved and Rural Healthcare Regions. International Journal of Multidisciplinary Research and Growth Evaluation, 1(5), 691 to 706. DOI: 10.54660/IJMRGE.2020.1.5.691 to 706. Aminu-Ibrahim, A.Y. & Ogbete, J.C. (2023). Healthcare Infrastructure as a Public Health Intervention Using Evidence from Large Laboratory Networks. Shodhshauryam, International Scientific Refereed Research Journal, 6(1), 256 to 286. DOI: 10.32628/SHISRRJ23678. Anderson, R. (2008). Security Engineering: A Guide to Building Dependable Distributed Systems (2nd ed.). Wiley, Indianapolis, IN. Ani, U.P.D., He, H. and Tiwari, A. (2017). Review of cybersecurity issues in industrial critical infrastructure: Manufacturing in perspective. Journal of Cyber Security Technology, 1(1), 32 to 74. Anichukwueze, C. C., Osuji, V. C., & Oguntegbe, E. E. (2019). Global marketing law and consumer protection challenges: a strategic framework for multinational compliance. IRE Journals, 3(6), 325-333. Anichukwueze, C. C., Osuji, V. C., & Oguntegbe, E. E. (2020). Designing ethics and compliance training frameworks to drive measurable cultural and behavioral change. Int J Multidiscip Res Growth Eval, 1(3), 205-20. Anichukwueze, C. C., Osuji, V. C., & Oguntegbe, E. E. (2021a). Blockchain-based architectures for tamper-proof regulatory recordkeeping and real-time audit readiness. Int J Multidiscip Res Growth Eval, 2(6), 485-504. Anichukwueze, C. C., Osuji, V. C., & Oguntegbe, E. E. (2021b). Digital Marketing Compliance Risk Mitigation: Balancing Growth Objectives with Multi-Jurisdictional Regulations. Anichukwueze, C. C., Osuji, V. C., & Oguntegbe, E. E. (2022). LegalTech-Enabled Internal Audit Automation: Advancing Efficiency, Transparency, and Regulatory Preparedness. Anichukwueze, C. C., Osuji, V. C., & Oguntegbe, E. E. (2023). Building a Comprehensive AI Governance Risk Index to Support Global Enterprise Decision-Making. Anioke, S. C., & Atima, M. E. (2018). Regulatory Analytics Approaches for Improving Occupational Health Safety Outcomes Across Public and Private Workplaces. Anioke, S. C., & Atima, M. E. (2019). Digital Employer Risk Rating Frameworks Supporting Public Health Oriented Social Insurance Compliance Systems. Anioke, S. C., & Atima, M. E. (2023a). Public health governance models using process optimization and performance metrics for regulatory oversight. International Journal of Advanced Multidisciplinary Research and Studies, 3(6), 2534 to 2548. https://doi.org/10.62225/2583049X.2023.3.6.5491 Anioke, S. C., & Atima, M. E. (2023b). Public health informatics frameworks for protecting vulnerable populations through data-driven policy enforcement. International Journal of Advanced Multidisciplinary Research Studies, 3(6), 2564 to 2579. Anthony, P., Ezeh, F.E., Oparah, O.S., Gado, P., Adeleke, A.S., Gbaraba, S.V., Okoli, A.O. & Omotayo, O. (2023). Adaptive Multi-Modal AI Systems for Continuous Disease Monitoring Via IoT and Wearable Devices. International Journal of Advanced Multidisciplinary Research and Studies, 3(1), 1557 to 1570. DOI: 10.62225/2583049X.2023.3.1.5158. Antonakakis, M., April, T., Bailey, M., Bernhard, M., Bursztein, E., Cochran, J. et al. (2017). Understanding the Mirai botnet. USENIX Security 2017, 1093 to 1110. Anwar, S. and Soltesz, B. (2016). Securing the smart grid. International Journal of Advanced Research in Computer Science, 7(1). Apruzzese, G., Colajanni, M., Ferretti, L., Guido, A. and Marchetti, M. (2018). On the effectiveness of machine and deep learning for cyber security. CyCon 2018, 371 to 390. Apruzzese, G., Colajanni, M., Ferretti, L. and Marchetti, M. (2019). Addressing adversarial attacks against security systems based on machine learning. International Conference on Cyber