Abstract:Accurate detection and diagnosis of abnormal behaviors such as network attacks from multivariate time series (MTS) are crucial for ensuring the stable and effective operation of industrial cyber-physical systems (CPS). However, existing researches pay little attention to the logical dependencies among system working states, and have difficulties in explaining the evolution mechanisms of abnormal signals. To reveal the spatio-temporal association relationships and evolution mechanisms of the working states of industrial CPS, this paper proposes a fine-grained adaptive anomaly diagnosis method (i.e. MAD-Transformer) to identify and diagnose anomalies in MTS. MAD-Transformer first constructs a temporal state matrix to characterize and estimate the change patterns of the system states in the temporal dimension. Then, to better locate the anomalies, a spatial state matrix is also constructed to capture the inter-sensor state correlation relationships within the system. Subsequently, based on these two types of state matrices, a three-branch structure of series-temporal-spatial attention module is designed to simultaneously capture the series, temporal, and space dependencies among MTS. Afterwards, three associated alignment loss functions and a reconstruction loss are constructed to jointly optimize the model. Finally, anomalies are determined and diagnosed by comparing the residual matrices with the original matrices. We conducted comparative experiments on five publicly datasets spanning three application domains (service monitoring, spatial and earth exploration, and water treatment), along with a petroleum refining simulation dataset collected by ourselves. The results demonstrate that MAD-Transformer can adaptively detect fine-grained anomalies with short duration, and outperforms the state-of-the-art baselines in terms of noise robustness and localization performance.

Reconstruction-based Multi-Scale Anomaly Detection for Cyber-Physical Systems

An Unsupervised Framework for Anomaly Detection in a Water Treatment System

Unsupervised Deep Anomaly Detection for Multi-Sensor Time-Series Signals

CANet: Convolutional Attention-based Network for Multivariate Time Series Anomaly Detection

Anomaly Detection Based on Data Super-Resolution in Industrial Cyber-Physical Systems with Multi-Rate Sampling

An Interpretable Multivariate Time-series Anomaly Detection Method in Cyber-Physical Systems Based on Adaptive Mask

AMAD: Adversarial Multiscale Anomaly Detection on High-Dimensional and Time-Evolving Categorical Data

An Unsupervised Spatiotemporal Graphical Modeling Approach to Anomaly Detection in Distributed CPS

A Multi-scale Parallel Unsupervised Model for Multivariate Time Series Anomaly Detection

Self-Attention-Based Multivariate Anomaly Detection for CPS Time Series Data with Adversarial Autoencoders

Hybrid Anomaly Detection via Multihead Dynamic Graph Attention Networks for Multivariate Time Series

Correlation-Based Anomaly Detection Method for Multi-sensor System

Unsupervised Spatio-Temporal State Estimation for Fine-grained Adaptive Anomaly Diagnosis of Industrial Cyber-physical Systems

Multi-Scale Time Series Ensemble Learning for Information System Anomaly Detection

SCAAE: Using Self-Supervised Contrastive Learning in Adversarial AutoEncoder for Anomaly Detection of Multivariate Time Series in Cyber Physics Systems

Deep Learning-Based Cyber–Physical Feature Fusion for Anomaly Detection in Industrial Control Systems

A Deep Neural Network for Unsupervised Anomaly Detection and Diagnosis in Multivariate Time Series Data

Anomalous Signal Detection for Cyber-Physical Systems Using Interpretable Causal Neural Network

Deep Learning-based Anomaly Detection in Cyber-physical Systems

Multi-source data based anomaly detection through temporal and spatial characteristics

CSCAD: Correlation Structure-Based Collective Anomaly Detection in Complex System