Abstract:To date, significant progress has been made in the field of railway anomaly detection using technologies such as real-time data analytics, the Internet of Things, and machine learning. As technology continues to evolve, the ability to detect and respond to anomalies in railway systems is once again in the spotlight. However, railway anomaly detection faces challenges related to the vast infrastructure, dynamic conditions, aging infrastructure, and adverse environmental conditions on the one hand, and the scale, complexity, and critical safety implications of railway systems on the other. Our study is underpinned by the three objectives. Specifically, we aim to identify time series anomaly detection methods applied to railway sensor device data, recognize the advantages and disadvantages of these methods, and evaluate their effectiveness. To address the research objectives, the first part of the study involved a systematic literature review and a series of controlled experiments. In the case of the former, we adopted well-established guidelines to structure and visualize the review. In the second part, we investigated the effectiveness of selected machine learning methods. To evaluate the predictive performance of each method, a five-fold cross-validation approach was applied to ensure the highest accuracy and generality. Based on the calculated accuracy, the results show that the top three methods are CatBoost (96%), Random Forest (91%), and XGBoost (90%), whereas the lowest accuracy is observed for One-Class Support Vector Machines (48%), Local Outlier Factor (53%), and Isolation Forest (55%). As the industry moves toward a zero-defect paradigm on a global scale, ongoing research efforts are focused on improving existing methods and developing new ones that contribute to the safety and quality of rail transportation. In this sense, there are at least four avenues for future research worth considering: testing richer data sets, hyperparameter optimization, and implementing other methods not included in the current study.

Temporal assessment of malicious behaviors: application to turnout field data monitoring

Adversarial Attacks and Mitigation for Anomaly Detectors of Cyber-Physical Systems

Mining Temporal Attack Patterns from Cyberthreat Intelligence Reports

Railway Defender Kill Chain to Predict and Detect Cyber-Attacks

Statistical Techniques for Detecting Cyberattacks on Computer Networks Based on an Analysis of Abnormal Traffic Behavior

Identification and prediction of attacks to industrial control systems using temporal point processes

Defending Water Treatment Networks: Exploiting Spatio-temporal Effects for Cyber Attack Detection

Modeling and Detecting False Data Injection Attacks against Railway Traction Power Systems

Identification of Behavioural Models for Railway Turnouts Monitoring

Probabilistically Inferring Attack Ramifications Using Temporal Dependence Network

Robust Detection of Critical Events in the Context of Railway Security Based on Multimodal Sensor Data Fusion

Improve Safety and Security of Intelligent Railway Transportation System Based on Balise Using Machine Learning Algorithm and Fuzzy System

Tracking Real-time Anomalies in Cyber-Physical Systems Through Dynamic Behavioral Analysis

Anomaly Detection in Railway Sensor Data Environments: State-of-the-Art Methods and Empirical Performance Evaluation

Detecting Anomalies in Distributed Control Systems by Modeling Traffic Behaviors

Analysis of Security Threats and Vulnerabilities for Train Control and Monitoring Systems

Health Assessment of Railway Turnouts: A Case Study

An Ontological Approach to the Detection of Anomalies in Vehicular Ad Hoc Networks

Rule-based anomaly detection for railway signalling networks

Recent Advances in Video Analytics for Rail Network Surveillance for Security, Trespass and Suicide Prevention—A Survey

An Innovative Attack Modelling and Attack Detection Approach for a Waiting Time-based Adaptive Traffic Signal Controller