“…Trading network Examining a game character's possession event log and transaction event log to derive it as a feature [29,30] Gameplay style Investigating gameplay styles such as player information, player action, and combat ability [31,32] Social network Analysis of social network characteristics between players such as part play logs and chat logs [33][34][35] Sequence analysis Characterized by assuming that the player's actions, such as action sequences and battle sequences, are one sequence [36][37][38] Self-similarity Analyzed based on the assumption that the bots have self-similarity, and the action frequency and action type are used as features [13,39] Character movement Identifying a character's movement pattern and use movement speed, distance, and location [40,41] Character behavior Observering the character's behavior and using it as a feature by applying various statistics [17,[42][43][44][45] We analyzed the logs generated in a smart city's sensor layer using the hardware-inthe-loop (HIL)-based augmented ICS (HAI 1.0) dataset, which is an infrastructure dataset, as a case study. Furthermore, we investigated the applicability of the proposed approach to such sensor logs and determined how to best apply it.…”