arXiv:2504.06320cs.CRcs.AI2025-04被引 7

用物理启发的一致性机制,提升工控系统异常检测效率与鲁棒性。

Hybrid Temporal Differential Consistency Autoencoder for Efficient and Sustainable Anomaly Detection in Cyber-Physical Systems

  • 融合时序差分一致性与混合节点结构,捕捉系统动态规律
  • 检测速度比现有最优方法快3%,且无需领域知识
  • 模型轻量化适合边缘部署,适合工业安全场景

由于快速数字化及物联网设备与工业控制系统(ICS)的集成,关键基础设施(尤其是供水系统)面临的网络攻击日益增多。这类网络物理系统(CPS)引入了新的漏洞,亟需高效自动的入侵检测系统(IDS)以应对潜在威胁。本文针对异常检测中的核心挑战,利用传感器数据的时间相关性,将物理原理融入机器学习模型,并优化计算效率以适配边缘应用。基于时序差分一致性(TDC)损失,提出一种混合自编码器方法(Hybrid TDC-AE),通过结合确定性节点与传统统计节点,使模型能处理非确定性过程。该方法在不依赖领域知识的前提下,分类性能达到当前最优水平,异常检测时间缩短3%;同时减少全连接层数量,在保持传统自编码器计算效率的基础上实现更可持续的解决方案。结果表明,借助物理启发的一致性原则可显著提升异常检测能力,增强网络物理系统的韧性。

原文摘要 · Abstract (English)

Cyberattacks on critical infrastructure, particularly water distribution systems, have increased due to rapid digitalization and the integration of IoT devices and industrial control systems (ICS). These cyber-physical systems (CPS) introduce new vulnerabilities, requiring robust and automated intrusion detection systems (IDS) to mitigate potential threats. This study addresses key challenges in anomaly detection by leveraging time correlations in sensor data, integrating physical principles into machine learning models, and optimizing computational efficiency for edge applications. We build upon the concept of temporal differential consistency (TDC) loss to capture the dynamics of the system, ensuring meaningful relationships between dynamic states. Expanding on this foundation, we propose a hybrid autoencoder-based approach, referred to as hybrid TDC-AE, which extends TDC by incorporating both deterministic nodes and conventional statistical nodes. This hybrid structure enables the model to account for non-deterministic processes. Our approach achieves state-of-the-art classification performance while improving time to detect anomalies by 3%, outperforming the BATADAL challenge leader without requiring domain-specific knowledge, making it broadly applicable. Additionally, it maintains the computational efficiency of conventional autoencoders while reducing the number of fully connected layers, resulting in a more sustainable and efficient solution. The method demonstrates how leveraging physics-inspired consistency principles enhances anomaly detection and strengthens the resilience of cyber-physical systems.

异常检测工控系统自编码器边缘计算

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。