Specification Mining for Intrusion Detection in Networked Control Systems