Abstract:Accurate detection and diagnosis of abnormal behaviors such as network attacks from multivariate time series (MTS) are crucial for ensuring the stable and effective operation of industrial cyber-physical systems (CPS). However, existing researches pay little attention to the logical dependencies among system working states, and have difficulties in explaining the evolution mechanisms of abnormal signals. To reveal the spatio-temporal association relationships and evolution mechanisms of the working states of industrial CPS, this paper proposes a fine-grained adaptive anomaly diagnosis method (i.e. MAD-Transformer) to identify and diagnose anomalies in MTS. MAD-Transformer first constructs a temporal state matrix to characterize and estimate the change patterns of the system states in the temporal dimension. Then, to better locate the anomalies, a spatial state matrix is also constructed to capture the inter-sensor state correlation relationships within the system. Subsequently, based on these two types of state matrices, a three-branch structure of series-temporal-spatial attention module is designed to simultaneously capture the series, temporal, and space dependencies among MTS. Afterwards, three associated alignment loss functions and a reconstruction loss are constructed to jointly optimize the model. Finally, anomalies are determined and diagnosed by comparing the residual matrices with the original matrices. We conducted comparative experiments on five publicly datasets spanning three application domains (service monitoring, spatial and earth exploration, and water treatment), along with a petroleum refining simulation dataset collected by ourselves. The results demonstrate that MAD-Transformer can adaptively detect fine-grained anomalies with short duration, and outperforms the state-of-the-art baselines in terms of noise robustness and localization performance.

An Interpretable Multivariate Time-series Anomaly Detection Method in Cyber-Physical Systems Based on Adaptive Mask

An Unsupervised Framework for Anomaly Detection in a Water Treatment System

An Unsupervised Short- and Long-Term Mask Representation for Multivariate Time Series Anomaly Detection

DUMA: Dual Mask for Multivariate Time Series Anomaly Detection

CANet: Convolutional Attention-based Network for Multivariate Time Series Anomaly Detection

Reconstruction-based Multi-Scale Anomaly Detection for Cyber-Physical Systems

Anomaly Detection for Multivariate Time Series in IoT Using Discrete Wavelet Decomposition and Dual Graph Attention Networks

SCAAE: Using Self-Supervised Contrastive Learning in Adversarial AutoEncoder for Anomaly Detection of Multivariate Time Series in Cyber Physics Systems

Self-Attention-Based Multivariate Anomaly Detection for CPS Time Series Data with Adversarial Autoencoders

Anomalous Signal Detection for Cyber-Physical Systems Using Interpretable Causal Neural Network

Unsupervised Spatio-Temporal State Estimation for Fine-grained Adaptive Anomaly Diagnosis of Industrial Cyber-physical Systems

DPDGAD: A Dual-Process Dynamic Graph-based Anomaly Detection for multivariate time series analysis in cyber-physical systems

Deep Learning-based Anomaly Detection in Cyber-physical Systems

Explainable Time Series Anomaly Detection using Masked Latent Generative Modeling

Self-adaptive Statistical Process Control for Anomaly Detection in Time Series.

An Unsupervised Spatiotemporal Fusion Network Augmented with Random Mask and Time-Relative Information Modulation for Anomaly Detection of Machines with Multiple Measuring Points.

Explainable Online Unsupervised Anomaly Detection for Cyber-Physical Systems via Causal Discovery from Time Series

Hierarchical Context Representation and Self-adaptive Thresholding for Multivariate Anomaly Detection

Adversarial Training of LSTM-ED Based Anomaly Detection for Complex Time-Series in Cyber-Physical-social Systems

An Evaluation of Anomaly Detection and Diagnosis in Multivariate Time Series

CGS-Mask: Making Time Series Predictions Intuitive for All