针对多产品制造系统,提出基于产品感知的自编码器提升异常检测鲁棒性。
Product-Aware Deep Autoencoders for Robust Process Monitoring in Multi-Product Cyber-Physical Systems

- 构建产品感知自编码器,仅在特定产品类型数据上训练,缩小决策边界。
- 在扩展的TEP基准测试中,对77.8%攻击场景全局模型漏检,该模型实现100%检测率。
- 适合需要高安全性的柔性制造系统,尤其关注产品切换时的异常监测。
随着工业4.0推动网络物理系统(CPS)在制造中的集成,鲁棒的异常检测对保障过程安全与安全至关重要。当前数据驱动方法通常采用不区分产品的全局模型,在所有正常运行数据上训练。然而现代工厂常需处理多种产品等级。这类全局模型因需适应多模式差异,导致决策边界过宽,形成‘盲区’,使微小异常或针对性攻防难以被发现。本文首先证实此类漏洞存在于跨产品等级的全局模型中,并提出产品感知自编码器,将学习范围限制于特定产品分布。虽非最优解,但显著降低盲区风险。在扩展的田纳西东部工艺(Extended TEP)基准上验证,该框架在标准指标上与全局基线相当,且对产品等级特异性工况更具鲁棒性。最关键的是,模拟攻击测试显示:全局模型在77.8%场景中未能检测到操作偏差,而产品感知系统实现100%检测准确率。结果表明,在柔性制造环境中,通用异常检测器可能带来显著安全风险,亟需向模式感知诊断架构演进。
原文摘要 · Abstract (English)
As Industry 4.0 accelerates the integration of Cyber-Physical Systems (CPS) in manufacturing, robust anomaly detection has become critical for ensuring process safety and security. Current data-driven approaches typically employ "product-agnostic" or global models trained on the aggregate of all normal operating data. However, modern industrial facilities frequently operate under diverse product grades. While computationally simple, these global models inherently expand their decision boundaries to accommodate the variance of multiple modes, creating a "blind spot" where subtle anomalies or targeted cyber-physical attacks may be masked by the wide acceptance region of the model. In this work, we first demonstrate that the vulnerability described above is present in global-agnostic models operating across multiple product grades. We then present a Product-Aware Autoencoder as a principled mitigation that restricts the learning domain to grade-specific distributions. While this approach reduces the identified blind-spot risk, we do not claim it as the optimal mitigation among all possible alternatives. We rigorously validate this approach against a Global Agnostic baseline using the Extended Tennessee Eastman Process (TEP) benchmark. Our empirical results indicate that the Product-Aware framework performs comparably to the global baseline on standard detection metrics, while offering improved robustness to product-grade-specific operating modes. Most critically, stress tests simulating our hypothetical attack scenarios reveal that while the global model fails to detect operational deviations in 77.8% of the scenarios, the product-aware system achieves 100% detection accuracy. These findings suggest that, in flexible manufacturing environments, generalized anomaly detectors can pose non-trivial security risks, motivating a shift toward mode-aware diagnostic architectures.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。