Usenix Security '16 - Specification Mining For Intrusion Detection In Networked Control Systems