Abstract:Accurate detection and diagnosis of abnormal behaviors such as network attacks from multivariate time series (MTS) are crucial for ensuring the stable and effective operation of industrial cyber-physical systems (CPS). However, existing researches pay little attention to the logical dependencies among system working states, and have difficulties in explaining the evolution mechanisms of abnormal signals. To reveal the spatio-temporal association relationships and evolution mechanisms of the working states of industrial CPS, this paper proposes a fine-grained adaptive anomaly diagnosis method (i.e. MAD-Transformer) to identify and diagnose anomalies in MTS. MAD-Transformer first constructs a temporal state matrix to characterize and estimate the change patterns of the system states in the temporal dimension. Then, to better locate the anomalies, a spatial state matrix is also constructed to capture the inter-sensor state correlation relationships within the system. Subsequently, based on these two types of state matrices, a three-branch structure of series-temporal-spatial attention module is designed to simultaneously capture the series, temporal, and space dependencies among MTS. Afterwards, three associated alignment loss functions and a reconstruction loss are constructed to jointly optimize the model. Finally, anomalies are determined and diagnosed by comparing the residual matrices with the original matrices. We conducted comparative experiments on five publicly datasets spanning three application domains (service monitoring, spatial and earth exploration, and water treatment), along with a petroleum refining simulation dataset collected by ourselves. The results demonstrate that MAD-Transformer can adaptively detect fine-grained anomalies with short duration, and outperforms the state-of-the-art baselines in terms of noise robustness and localization performance.

Anomaly Detection Based on Data Super-Resolution in Industrial Cyber-Physical Systems with Multi-Rate Sampling

An Unsupervised Framework for Anomaly Detection in a Water Treatment System

Cross-domain Anomaly Detection for Power Industrial Control System

An Error Neighborhood-Based Detection Mechanism to Improve the Performance of Anomaly Detection in Industrial Control Systems

Reconstruction-based Multi-Scale Anomaly Detection for Cyber-Physical Systems

An Unsupervised Anomaly Detection Approach Based On Industrial Big Data

An Attention-Based Deep Generative Model for Anomaly Detection in Industrial Control Systems

Hybrid Cloud-Edge Collaborative Data Anomaly Detection in Industrial Sensor Networks

High-Performance Unsupervised Anomaly Detection for Cyber-Physical System Networks

Anomaly Detection of Industrial Multi-Sensor Signals Based on Enhanced Spatiotemporal Features

Deep Learning-Based Cyber–Physical Feature Fusion for Anomaly Detection in Industrial Control Systems

Anomaly Detection Method Based on Temporal Spatial Information Enhancement

Dual Auto-Encoder GAN-Based Anomaly Detection for Industrial Control System

Detecting Cyber Attacks in Industrial Control Systems Using Spatio-Temporal Autoencoder.

A Deep Learning Approach to Anomaly Sequence Detection for High-Resolution Monitoring of Power Systems

A traffic anomaly detection approach based on unsupervised learning for industrial cyber-physical system

Unsupervised Spatio-Temporal State Estimation for Fine-grained Adaptive Anomaly Diagnosis of Industrial Cyber-physical Systems

Progressive Boundary Guided Anomaly Synthesis for Industrial Anomaly Detection

Self-adaptive Statistical Process Control for Anomaly Detection in Time Series.

Rethinking the Operation Pattern for Anomaly Detection in Industrial Cyber–Physical Systems

Data-driven Unsupervised Anomaly Detection of Manufacturing Processes with Multi-Scale Prototype Augmentation and Multi-Sensor Data