Anomaly Detection in IEC-61850 GOOSE Networks: Evaluating Unsupervised and Temporal Learning for Real-Time Intrusion Detection

2026-04-17T07:23:33Z78210cc8c9950f7a7e23025221146bef2842c767e59a61b358c951b3b10c2e4e
Android securityBloom filterGOOSEGRUIEC-61850LLM agentsOWASP API Securityagentic systemsbackend vulnerabilitiescloud sovereigntycontrol planecross-environment generalizationexcessive data exposureface reidentificationhomomorphic encryptionindustrial control systemsmutual TLSpost-quantum cryptographyprivacy-preserving biometricsreal-time intrusion detectionreverse engineeringtemporal modelsunsupervised learningusabilityzero-day disclosure (responsible disclosure reported to vendor)

What happened

This collection of papers covers applied security research across industrial control systems (ICS), cloud sovereignty, privacy-preserving biometrics, mobile backend security, adversarial and poisoning threats to ML-based detectors, agentic reverse-engineering limits, mutual TLS usability, and safe agent communication languages. Key operational findings: (1) For IEC-61850 GOOSE networks, unsupervised temporal models meet sub-4ms real-time constraints while retaining good detection (best GRU: F1=0.8737 at 1.118ms); supervised Random Forest performed best (F1=0.9516) but is too slow (21.8ms). (2)

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
arxiv_cs_cr
Record identifier
78210cc8c9950f7a7e23025221146bef2842c767e59a61b358c951b3b10c2e4e
Enrichment time
2026-04-17T07:23:33Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.