Improving network security monitoring for industrial control systems