https://5dok.org/document/q052d3r9-timing-approach-network-based-anomaly-detection-scada-systems.html