The Modbus/TCP protocol is commonly used in SCADA systems for communications
between a human–machine interface (HMI) and programmable logic controllers (PLCs).
This paper presents a model-based intrusion detection system designed specifically for
Modbus/TCP networks.