Abstract:Recently developed fault classification methods for industrial processes are mainly data-driven. Notably, models based on deep neural networks have significantly improved fault classification accuracy owing to the inclusion of a large number of data patterns. However, these data-driven models are vulnerable to adversarial attacks; thus, small perturbations on the samples can cause the models to provide incorrect fault predictions. Several recent studies have demonstrated the vulnerability of machine learning methods and the existence of adversarial samples. This paper proposes a black-box attack method with an extreme constraint for a safe-critical industrial fault classification system: Only one variable can be perturbed to craft adversarial samples. Moreover, to hide the adversarial samples in the visualization space, a Jacobian matrix is used to guide the perturbed variable selection, making the adversarial samples in the dimensional reduction space invisible to the human eye. Using the one-variable attack (OVA) method, we explore the vulnerability of industrial variables and fault types, which can help understand the geometric characteristics of fault classification systems. Based on the attack method, a corresponding adversarial training defense method is also proposed, which efficiently defends against an OVA and improves the prediction accuracy of the classifiers. In experiments, the proposed method was tested on two datasets from the Tennessee–Eastman process (TEP) and steel plates (SP). We explore the vulnerability and correlation within variables and faults and verify the effectiveness of OVAs and defenses for various classifiers and datasets. For industrial fault classification systems, the attack success rate of our method is close to (on TEP) or even higher than (on SP) the current most effective first-order white-box attack method, which requires perturbation of all variables.

Adversarial Attack for Deep-Learning-based Fault Diagnosis Models.

Robust Adversarial Attacks on Imperfect Deep Neural Networks in Fault Classification

A novel adversarial learning framework in deep convolutional neural network for intelligent diagnosis of mechanical faults.

Towards evaluating the robustness of deep diagnostic models by adversarial attack

One-Variable Attack on the Industrial Fault Classification System and Its Defense

Adversarial Attacks and Defenses in Fault Detection and Diagnosis: A Comprehensive Benchmark on the Tennessee Eastman Process

Deep Model Based Domain Adaptation for Fault Diagnosis.

Deep Domain Adversarial Method with Central Moment Discrepancy for Intelligent Transfer Fault Diagnosis

Information Fingerprint for Secure Industrial Big Data Analytics.

A Deep Convolutional Neural Network with New Training Methods for Bearing Fault Diagnosis under Noisy Environment and Different Working Load

Double-level Adversarial Domain Adaptation Network for Intelligent Fault Diagnosis.

A Novel Multiscale Lightweight Fault Diagnosis Model Based on the Idea of Adversarial Learning

A Mixed Adversarial Adaptation Network for Intelligent Fault Diagnosis

Open Set Bearing Fault Diagnosis with Domain Adaptive Adversarial Network under Varying Conditions

Adversarial Examples: Attacks and Defenses for Deep Learning

Adversarial Attack? Don't Panic

A New Deep Learning Model for Fault Diagnosis with Good Anti-Noise and Domain Adaptation Ability on Raw Vibration Signals

Fault Diagnosis Using Unsupervised Transfer Learning Based on Adversarial Network

Fault Diagnosis Using GNN Through Adversarial Attack

A Review on Adversarial–based Deep Transfer Learning Mechanical Fault Diagnosis

A Novel Deep Learning–based Fault Diagnosis Algorithm for Preventing Protection Malfunction