Explainable Hybrid Intrusion Detection for SCADA/ICS: A Review and Research Agenda

A 22.6 KB document synthesizing evidence from 40 studies published between 2014 and 2025. This systematic review by Heinrihs Kristians Skrodelis, published in March 2026, identifies five practical gaps in industrial intrusion detection systems, including limited zero-day coverage and explainability challenges.

Use Cases

• Surveying reported performance ranges (90%–99% accuracy, 0.8%–2.1% false-positive rates) for SCADA/IDS systems based on the review's synthesis.
• Developing a conceptual reference architecture based on the proposed fusion of protocol-aware signatures with temporal anomaly detection.
• Evaluating future prototypes against the provided checklist for deployment under latency and safety constraints.
• Investigating research gaps in explainability mechanisms for operator understanding as highlighted in the review.

Strengths

• Systematically reviews 40 studies from a defined period (2014–2025).
• Identifies five specific, practical gaps in the field (e.g., false-positive control, deployment complexity).
• Provides a concrete conceptual architecture and evaluation checklist for future work.
• Released under a permissive CC-BY-4.0 license.

Limitations

• The 22.6 KB size indicates a limited-scope document, not a primary dataset.
• Column-level documentation is absent; the content is a review article, not structured data.
• The document does not report original experimental results, only summaries of prior work.

Provenance

Source

figshare

Collection Method

Systematic literature review conducted across major databases.

Time Range

Covers literature from 2014 to 2025.

Freshness

Last updated 2026-03-18 10:04:58

Geography

null