Computer Science ›› 2023, Vol. 50 ›› Issue (7): 237-245.doi: 10.11896/jsjkx.220700078

• Artificial Intelligence • Previous Articles     Next Articles

Anomaly Detection Method Based on Context Information Fusion and Noise Adaptation

HENG Hongjun, ZHOU Wenhua   

  1. College of Computer Science and Technology,Civil Aviation University of China,Tianjin 300300,China
  • Received:2022-07-08 Revised:2022-12-08 Online:2023-07-15 Published:2023-07-05
  • About author:HENG Hongjun,born in 1968,Ph.D,associate professor,is a member of China Computer Federation.His main research interests include intelligent information processing,natural language,knowledge graph and anomaly detection.ZHOU Wenhua,born in 1998,postgra-duate.Her main research interests include anomaly detection and multiva-riate time series data.
  • Supported by:
    National Natural Science Foundation of China(U1333109).

Abstract: The data collected by field devices such as sensors and actuators in cyber-physical systems(CPSs) contains complex context information.To extract and fuse context information in data and reduce the interference caused by noise,an anomaly detection method based on context information fusion and noise adaptation is proposed.In this method,an encoder-decoder network composed of adaptive denoising encoder,context information encoder and decoder is designed to model the state-space model of CPSs.The adaptive denoising encoder generates adaptive noise by fitting the distribution of noise in the data during the training process,and adds the adaptive noise to the sensor data of the training data,so as to improve the robustness of the encoder-decoder network,reduce the interference caused by noise,and force the adaptive denoising decoder to learn the system hidden state with stronger generalization.Context information encoder uses long-short term memory(LSTM) and convolutional neural networks(CNN) to extract temporal context information and spatial context information in the data window,and uses self-attention mechanism to fuse these two types of context information with system hidden state,so as to obtain the fusion result,which is used to infer the system hidden state at the current moment,so as to increase the amount of information of system hidden state at the current moment.The decoder can decode the corresponding sensor data more accurately by using the above system hidden states.After the encoder-decoder network training is completed,the system hidden state and the decoded sensor data are obtained,and the anomaly score is calculated based on the unscented Kalman filter algorithm.Experimental results on two actual CPSs datasets of SWaT and PUMP show that the F1 value of the proposed method is better than other comparison methods,which verifies its effectiveness.

Key words: Anomaly detection, Adaptive noise, Context information, State space model, Cyber-physical systems

CLC Number: 

  • TP183
[1]YANG P,STANKEVICIUS D,MAROZAS V,et al.Lifelogging data validation model for internet of things enabled personalized healthcare[J].IEEE Transactions on Systems,Man,and Cybernetics,Systems,2016,48(1):50-64.
[2]YIN C,XI J,SUN R,et al.Location privacy protection based on differential privacy strategy for big data in industrial internet of things[J].IEEE Transactions on Industrial Informatics,2017,14(8):3628-3636.
[3]BLÁZQUEZ-GARCÍA A,CONDE A,MORI U,et al.A review on outlier/anomaly detection in time series data[J].ACM Computing Surveys(CSUR),2021,54(3):1-33.
[4]LIN S,CLARK R,BIRKE R,et al.Anomaly detection for time series using vae-lstm hybrid model[C]//Proceedings of the ICASSP 2020-2020 IEEE International Conference on Acoustics,Speech and Signal Processing(ICASSP).USA,IEEE,2020:4322-4326.
[5]LI J,GAO H.Survey on sensor network research[J].Journal of Computer Research and Development,2008,45(1):1-15.
[6]FEI H,XIAO F,LI G H,et al.An anomaly detection method of wireless sensor network based on multi-modals data stream[J].Chinese Journal of Computers,2017,40(8):1829-1842.
[7]ZHANG C,SONG D,CHEN Y,et al.A deep neural network for unsupervised anomaly detection and diagnosis in multivariate time series data[C]//Proceedings of the AAAI Conference on Artificial Intelligence.USA,AAAI,2019,33(1):1409-1416.
[8]KIM T Y,CHO S B.Web traffic anomaly detection using C-LSTM neural networks[J].Expert Systems with Applications,2018,106:66-76.
[9]YIN C,ZHANG S,WANG J,et al.Anomaly detection based on convolutional recurrent autoencoder for IoT time series[J].IEEE Transactions on Systems,Man,and Cybernetics,Systems,2020,52(1):112-122.
[10]MALHOTRA P,RAMAKRISHNAN A,ANAND G,et al.LSTM-based encoder-decoder for multi-sensor anomaly detection[J].arXiv:1607.00148,2016.
[11]PARK D,HOSHI Y,KEMP C C.A multimodal anomaly detector for robot-assisted feeding using an lstm-based variational autoencoder[J].IEEE Robotics and Automation Letters,2018,3(3):1544-1551.
[12]LI D,CHEN D,JIN B,et al.MAD-GAN,Multivariate anomaly detection for time series data with generative adversarial networks[C]//Proceedings of International Conference on Artificial Neural Networks.Cham,Springer,2019:703-716.
[13]SCHREYER M,SATTAROV T,SCHULZE C,et al.Detection of accounting anomalies in the latent space using adversarial autoencoder neural networks[J].arXiv:1908.00734,2019.
[14]AUDIBERT J,MICHIARDI P,GUYARD F,et al.Usad,Unsupervised anomaly detection on multivariate time series[C]//Proceedings of the 26th ACM SIGKDD International Conference on Knowledge Discovery & Data Mining.USA,ACM,2020:3395-3404.
[15]HUNDMAN K,CONSTANTINOU V,LAPORTE C,et al.Detecting spacecraft anomalies using lstms and nonparametric dynamic thresholding[C]//Proceedings of the 24th ACM SIGKDD International Conference on Knowledge Discovery & Data Mi-ning.USA,ACM,2018:387-395.
[16]SU Y,ZHAO Y,NIU C,et al.Robust anomaly detection for multivariate time series through stochastic recurrent neural network[C]//Proceedings of the 25th ACM SIGKDD International Conference on Knowledge Discovery & Data Mining.USA,ACM,2019:2828-2837.
[17]DENG A,HOOI B.Graph neural network-based anomaly detection in multivariate time series[C]//Proceedings of the AAAI Conference on Artificial Intelligence.USA,AAAI,2021,35(5):4027-4035.
[18]FENG C,TIAN P.Time series anomaly detection for cyber-physical systems via neural system identification and bayesian filtering[C]//Proceedings of the 27th ACM SIGKDD Confe-rence on Knowledge Discovery & Data Mining.USA:ACM,2021:2858-2867.
[19]SCHNEIDER T,QIU C,KLOFT M,et al.Detecting Anomalies within Time Series using Local Neural Transformations[J].arXiv:2202.03944,2022.
[20]LEE E A,SESHIA S A.Introduction to embedded systems,A cyber-physical systems approach[M].USA,MIT Press,2016:181-207.
[21]JULIER S J,UHLMANN J K.Unscented filtering and nonli-near estimation[J].Proceedings of the IEEE,2004,92(3):401-422.
[22]INOUE H.Multi-sample dropout for accelerated training andbetter generalization[J].arXiv:1905.09788,2019.
[23]JULIER S J.The scaled unscented transformation[C]//Proceedings of the 2002 American Control Conference(IEEE Cat.No.CH37301).USA,IEEE,2002:4555-4559.
[24]SIPPLE J.Interpretable,multidimensional,multimodal anomaly detection with negative sampling for detection of device failure[C]//Proceeding of the 37th International Conference on Machine Learning.USA,ACM,2020:9016-9025.
[25]LIU F T,TING K M,ZHOU Z H,et al.Isolation forest[C]//Proceedings of 2008 Eighth IEEE International Conference on Data Mining.USA,IEEE Computer Society,2008:413-422.
[26]NG A.Sparse autoencoder[J].CS294A Lecture Notes,2011,72(2011):1-19.
[27]GOH J,ADEPU S,TAN M,et al.Anomaly detection in cyber physical systems using recurrent neural networks[C]//Procee-dings of 2017 IEEE 18th International Symposium on High Assurance Systems Engineering(HASE).USA,IEEE,2017:140-145.
[28]ZONG B,SONG Q,MIN M R,et al.Deep autoencoding Gaussian mixture model for unsupervised anomaly detection[C]//Proceedings of International Conference on Learning Representations.USA,IEEE,2018:1-19.
[29]SHEN L,LI Z,KWOK J.Timeseries anomaly detection using temporal hierarchical one-class network[J].Advances in Neural Information Processing Systems,2020,33:13016-13026.
[1] LI Hui, LI Wengen, GUAN Jihong. Dually Encoded Semi-supervised Anomaly Detection [J]. Computer Science, 2023, 50(7): 53-59.
[2] SUN Kaiwei, WANG Zhihao, LIU Hu, RAN Xue. Maximum Overlap Single Target Tracking Algorithm Based on Attention Mechanism [J]. Computer Science, 2023, 50(6A): 220400023-5.
[3] ZHANG Guohua, YAN Xuefeng, GUAN Donghai. Anomaly Detection of Time-series Based on Multi-modal Feature Fusion [J]. Computer Science, 2023, 50(6A): 220700094-7.
[4] SUN Xuekui, DAI Hua, ZHOU Jianguo, YANG Geng, CHEN Yanli. LTTFAD:Log Template Topic Feature-based Anomaly Detection [J]. Computer Science, 2023, 50(6): 313-321.
[5] ZHAO Song, FU Hao, WANG Hongxing. Pseudo-abnormal Sample Selection for Video Anomaly Detection [J]. Computer Science, 2023, 50(5): 146-154.
[6] ZHANG Renbin, ZUO Yicong, ZHOU Zelin, WANG Long, CUI Yuhang. Multimodal Generative Adversarial Networks Based Multivariate Time Series Anomaly Detection [J]. Computer Science, 2023, 50(5): 355-362.
[7] CUI Jingsong, ZHANG Tongtong, GUO Chi, GUO Wenfei. Network Equipment Anomaly Detection Based on Time Delay Feature [J]. Computer Science, 2023, 50(3): 371-379.
[8] RAO Dan, SHI Hongwei. Study on Air Traffic Flow Recognition and Anomaly Detection Based on Deep Clustering [J]. Computer Science, 2023, 50(3): 121-128.
[9] DU Qiming, LI Nan, LIU Wenfu, YANG Shudan, YUE Feng. Sentiment Analysis of Chinese Short Text Combining Context and Dependent Syntactic Information [J]. Computer Science, 2023, 50(3): 307-314.
[10] XU Tian-hui, GUO Qiang, ZHANG Cai-ming. Time Series Data Anomaly Detection Based on Total Variation Ratio Separation Distance [J]. Computer Science, 2022, 49(9): 101-110.
[11] WANG Xin-tong, WANG Xuan, SUN Zhi-xin. Network Traffic Anomaly Detection Method Based on Multi-scale Memory Residual Network [J]. Computer Science, 2022, 49(8): 314-322.
[12] DU Hang-yuan, LI Duo, WANG Wen-jian. Method for Abnormal Users Detection Oriented to E-commerce Network [J]. Computer Science, 2022, 49(7): 170-178.
[13] SHEN Shao-peng, MA Hong-jiang, ZHANG Zhi-heng, ZHOU Xiang-bing, ZHU Chun-man, WEN Zuo-cheng. Three-way Drift Detection for State Transition Pattern on Multivariate Time Series [J]. Computer Science, 2022, 49(4): 144-151.
[14] WU Yu-kun, LI Wei, NI Min-ya, XU Zhi-cheng. Anomaly Detection Model Based on One-class Support Vector Machine Fused Deep Auto-encoder [J]. Computer Science, 2022, 49(3): 144-151.
[15] LENG Jia-xu, TAN Ming-pi, HU Bo, GAO Xin-bo. Video Anomaly Detection Based on Implicit View Transformation [J]. Computer Science, 2022, 49(2): 142-148.
Viewed
Full text


Abstract

Cited

  Shared   
  Discussed   
No Suggested Reading articles found!