Abstract:Recently developed fault classification methods for industrial processes are mainly data-driven. Notably, models based on deep neural networks have significantly improved fault classification accuracy owing to the inclusion of a large number of data patterns. However, these data-driven models are vulnerable to adversarial attacks; thus, small perturbations on the samples can cause the models to provide incorrect fault predictions. Several recent studies have demonstrated the vulnerability of machine learning methods and the existence of adversarial samples. This paper proposes a black-box attack method with an extreme constraint for a safe-critical industrial fault classification system: Only one variable can be perturbed to craft adversarial samples. Moreover, to hide the adversarial samples in the visualization space, a Jacobian matrix is used to guide the perturbed variable selection, making the adversarial samples in the dimensional reduction space invisible to the human eye. Using the one-variable attack (OVA) method, we explore the vulnerability of industrial variables and fault types, which can help understand the geometric characteristics of fault classification systems. Based on the attack method, a corresponding adversarial training defense method is also proposed, which efficiently defends against an OVA and improves the prediction accuracy of the classifiers. In experiments, the proposed method was tested on two datasets from the Tennessee–Eastman process (TEP) and steel plates (SP). We explore the vulnerability and correlation within variables and faults and verify the effectiveness of OVAs and defenses for various classifiers and datasets. For industrial fault classification systems, the attack success rate of our method is close to (on TEP) or even higher than (on SP) the current most effective first-order white-box attack method, which requires perturbation of all variables.

Data Guardian: A Data Protection Scheme for Industrial Monitoring Systems

Adversarial Attacks and Mitigation for Anomaly Detectors of Cyber-Physical Systems

Attack and Defense: Adversarial Security of Data-Driven FDC Systems

Boosting Adversarial Training in Safety-Critical Systems Through Boundary Data Selection

Adversarial Weight Prediction Networks for Defense of Industrial FDC Systems

Adversarial for Good – Defending Training Data Privacy with Adversarial Attack Wisdom

Transfer Adversarial Attacks Across Industrial Intelligent Systems.

Inference Attack and Privacy Security of Data-driven Industrial Process Monitoring Systems

Data Protection Method Against Cross-Domain Inference Threat in Cyber-Physical Power Grid

Information Fingerprint for Secure Industrial Big Data Analytics.

Attacks on Data-Driven Process Monitoring Systems: Subspace Transfer Networks

Leveraging Data Fitting and Trust Assessment to Improve the Security of Industrial Networks

One-Variable Attack on the Industrial Fault Classification System and Its Defense

Defending Against False Data Injection Attacks on Power System State Estimation

Verifiable Data Mining Against Malicious Adversaries in Industrial Internet of Things

Mode division-based anomaly detection against integrity and availability attacks in industrial cyber-physical systems

DODEM: DOuble DEfense Mechanism Against Adversarial Attacks Towards Secure Industrial Internet of Things Analytics

LDPGuard: Defenses against Data Poisoning Attacks to Local Differential Privacy Protocols

Generating Adversarial Examples Against Machine Learning-Based Intrusion Detector in Industrial Control Systems

A Data-Driven Approach To Preserve Safety and Reference Tracking for Constrained Cyber-Physical Systems Under Network Attacks

Exposing Hidden Attackers in Industrial Control Systems using Micro-distortions