Local and global decision fusion for cyber-physical system abnormality detection

Abbaszadeh, Masoud; Yund, Walter; Yan, Weizhong

Title: Local and global decision fusion for cyber-physical system abnormality detection

Full Record
Other Related Research

Abstract

Monitoring nodes may generate a series of current monitoring node values over time representing current operation of a cyber-physical system. A decision fusion computer platform may receive, from a local status determination module, an indication of whether each node has an initial local status of “normal”/“abnormal” and a local certainty score (with higher values of the local certainty score representing greater likelihood of abnormality). The computer platform may also receive, from a global status determination module, an indication of whether the system has an initial global status of “normal”/“abnormal” and a global certainty score. The computer platform may output, for each node, a fused local status of “normal” or “abnormal,” at least one fused local status being based on the initial global status. The decision fusion computer platform may also output a fused global status of “normal” or “abnormal” based on at least one initial local status.

Inventors:: Abbaszadeh, Masoud; Yund, Walter; Yan, Weizhong

Issue Date:: 2021-04-27

Research Org.:: General Electric Co., Schenectady, NY (United States)

Sponsoring Org.:: USDOE

OSTI Identifier:: 1823899

Patent Number(s):: 10990668

Application Number:: 16/132,705

Assignee:: General Electric Technology GmbH (Schenectady, NY)

DOE Contract Number:: OE0000833

Resource Type:: Patent

Resource Relation:: Patent File Date: 09/17/2018

Country of Publication:: United States

Language:: English

Citation Formats


                    Abbaszadeh, Masoud, Yund, Walter, and Yan, Weizhong. Local and global decision fusion for cyber-physical system abnormality detection.  United States: N. p., 2021. 
        Web.

Copy to clipboard


                    Abbaszadeh, Masoud, Yund, Walter, & Yan, Weizhong. Local and global decision fusion for cyber-physical system abnormality detection.  United States.

Copy to clipboard


                    Abbaszadeh, Masoud, Yund, Walter, and Yan, Weizhong. Tue .  
        "Local and global decision fusion for cyber-physical system abnormality detection".  United States.  https://www.osti.gov/servlets/purl/1823899.

Copy to clipboard


                    
@article{osti_1823899,

  title        = {Local and global decision fusion for cyber-physical system abnormality detection},

  author       = {Abbaszadeh, Masoud and Yund, Walter and Yan, Weizhong},

  abstractNote = {Monitoring nodes may generate a series of current monitoring node values over time representing current operation of a cyber-physical system. A decision fusion computer platform may receive, from a local status determination module, an indication of whether each node has an initial local status of “normal”/“abnormal” and a local certainty score (with higher values of the local certainty score representing greater likelihood of abnormality). The computer platform may also receive, from a global status determination module, an indication of whether the system has an initial global status of “normal”/“abnormal” and a global certainty score. The computer platform may output, for each node, a fused local status of “normal” or “abnormal,” at least one fused local status being based on the initial global status. The decision fusion computer platform may also output a fused global status of “normal” or “abnormal” based on at least one initial local status.},

  doi          = {},

  journal      = {},
number       = ,

  volume       = ,

  place        = {United States},

  year         = {2021},

  month        = {4}

}

Copy to clipboard

Patent:

Save / Share:

Export Metadata

Save to My Library

Similar Records in DOE Patents and OSTI.GOV collections:

Situation awareness and dynamic ensemble forecasting of abnormal behavior in cyber-physical system

Patent Abbaszadeh, Masoud; Mestha, Lalit Keshav

A plurality of monitoring nodes may each generate a time-series of current monitoring node values representing current operation of a cyber-physical system. A feature-based forecasting framework may receive the time-series of and generate a set of current feature vectors using feature discovery techniques. The feature behavior for each monitoring node may be characterized in the form of decision boundaries that separate normal and abnormal space based on operating data of the system. A set of ensemble state-space models may be constructed to represent feature evolution in the time-domain, wherein the forecasted outputs from the set of ensemble state-space models comprisemore » « less
Full Text Available
Hybrid feature-driven learning system for abnormality detection and localization

Patent Abbaszadeh, Masoud; D'Amato, Fernando Javier

A cyber-physical system may have a plurality of monitoring nodes each generating a series of current monitoring node values over time representing current operation of the system. A data-driven features extraction computer platform may receive the series of current monitoring node values and generate current data-driven feature vectors based on the series of current monitoring node values. A residual features extraction computer platform may receive the series of current monitoring node values, execute a system model and utilize a stochastic filter to determine current residual values, and generate current residual-driven feature vectors based on the current residual values. An abnormalmore » « less
Full Text Available
Cyber-attack detection, localization, and neutralization for unmanned aerial vehicles

Patent Mestha, Lalit Keshav; Anubi, Olugbenga; John, Justin Varkey

In some embodiments, an Unmanned Aerial Vehicle (“UAV”) system may be associated with a plurality of monitoring nodes, each monitoring node generating a series of monitoring node values over time that represent operation of the UAV system. An attack detection computer platform may receive the series of current monitoring node values and generate a set of current feature vectors. The attack detection computer platform may access an attack detection model having at least one decision boundary (e.g., created using a set of normal feature vectors a set of attacked feature vectors). The attack detection model may then be executed andmore » « less
Full Text Available
Cyber physical attack detection

Patent Ferragut, Erik M.; Laska, Jason A.

A cyber-security threat detection system and method stores physical data measurements from a cyber-physical system and extracts synchronized measurement vectors synchronized to one or more timing pulses. The system and method synthesize data integrity attacks in response to the physical data measurements and applies alternating parameterized linear and non-linear operations in response to the synthesized data integrity attacks. The synthesis renders optimized model parameters used to detect multiple cyber-attacks.
Full Text Available
Cyber physical attack detection

Patent Ferragut, Erik M.; Laska, Jason A.

A cyber-security threat detection system and method stores physical data measurements from a cyber-physical system and extracts synchronized measurement vectors synchronized to one or more timing pulses. The system and method synthesizes data integrity attacks in response to the physical data measurements and applies alternating parametrized linear and non-linear operations in response to the synthesized data integrity attacks. The synthesis renders optimized model parameters used to detect multiple cyber-attacks.
Full Text Available

Similar Records