Preprint
Jul 2026
ProvICS: A Provenance-based Intrusion Detection for Industrial Control Systems
Comparative analysis shows that ProvICS is among the few existing ICS/CPS benchmarks with multi-host kernel-level provenance, real PLC hardware-in-the-loop execution, decoded Modbus traffic, physical process-state measurements, and auxiliary raw PCAP traces in a time-synchronized collection.
Md Neyamul Islam Shibbir, Deepak K. Tosh
· 0 citations