Industrial control anomaly detection method for industrial control system with insufficient samples

An industrial control system and anomaly detection technology, applied in the direction of comprehensive factory control, instrumentation, calculation, etc., can solve the problems of limited calculation amount, large difference between source domain and target domain, and difficult to obtain

Pending Publication Date: 2022-07-12
BEIJING INSTITUTE OF PETROCHEMICAL TECHNOLOGY
View PDF0 Cites 1 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

The most commonly used transfer learning algorithm is TrAdaBoost and its variants. The data set that has been machine-learned in the algorithm is called the source domain, and the data set to be machine-learned is called the target domain. The TrAdaBoost algorithm requires the above two data sets to have the same structure. However, due to the scarcity of data sources for industrial control anomalies and few optional source domains, it is difficult to make the two data sets have the same structure; even if the TrAdaBoost algorithm can be used, the AUC value of the classifier will be caused by the large difference between the source domain and the target domain. (It can be roughly understood as the accuracy of the classifier) ​​is not high
In addition, the inventor found that when using the TrAdaBoost algorithm for machine learning, the number of iterations is not as large as possible, but there is an optimal value, but limited by the amount of calculation, it is difficult to find this optimal value

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Industrial control anomaly detection method for industrial control system with insufficient samples
  • Industrial control anomaly detection method for industrial control system with insufficient samples
  • Industrial control anomaly detection method for industrial control system with insufficient samples

Examples

Experimental program
Comparison scheme
Effect test

Embodiment 1

[0064] This experiment runs on Windows10 system, CPU is AMD Ryzen 7 4800H, GPU is NVIDIA GeForceRTX 2060, memory 16.0 GB, Python version 3.7, TensorFlow version 1.14.

[0065] This experiment uses two data sets for experimental verification, one of which is a public data set in the industrial control field as the source domain data, and the other is a self-built data set in the industrial control field as the target domain data. The public data set is the C-Town water distribution data set (referred to as the Singapore water plant data set) constructed by the Cyber ​​Security Research Center of the Singapore University of Science and Technology in 2018 (Riccardo Taormina et al. Battle of the Attack Detection Algorithms: Disclosing Cyber Attacks on Water Distribution Networks[J]. Journal of WaterResources Planning and Management, 2018, 144(8). DOI: 10.1061 / (ASCE)WR.1943-5452.0000969). The Singapore Water Works dataset network pipeline consists of 429 pipes, 388 connection point...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention relates to the technical field of comprehensive factory control, and discloses an industrial control anomaly detection method for an industrial control system with insufficient samples, and the method comprises the steps: constructing a classifier through employing a machine learning algorithm, and monitoring the reading of each sensor in the industrial control system through employing the classifier, so as to judge whether the current state is in an industrial control anomaly state or not. According to the method, all the sample features are arranged in a descending order by judging the influence degree of the sample features on the response, and then the sample features which are ranked in the front are intercepted for training, so that the TrAdaBoost algorithm can still be normally used for machine learning when the dimensions of the sample features of the source domain and the target domain are inconsistent; by improving back-filling parameters, the difference between a source domain and a target domain is considered, and the AUC value of the classifier is improved; by adopting a genetic algorithm, the optimal value of the number of iterations and the optimal value of the number of base classifiers are screened out with a small calculation amount.

Description

technical field [0001] The invention relates to the technical field of comprehensive factory control, in particular to an industrial control abnormality detection method for an industrial control system with insufficient samples. Background technique [0002] In recent years, as industrial control systems are widely used in various fields, industrial control anomaly detection algorithms have become particularly important. The anomaly detection algorithm performs machine learning on a large number of sample data, and grasps the characteristics of the data according to the label. [0003] Machine learning requires a large amount of sample data, but for most factories, the incidence of industrial control anomalies is very low, so the amount of samples that can be obtained is also very small, which is far from enough to meet the needs of machine learning. Even chemical plants with a lot of equipment still have a wide operating range, within which the normal operation of DCS can...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
IPC IPC(8): G06K9/62
CPCG06F18/2433G06F18/214Y02P90/02
Inventor 刘学君张小妮晏涌沙芸王昊郭嘉程李忠林王汝墨苏鹏张兴龙王博涛海鑫
Owner BEIJING INSTITUTE OF PETROCHEMICAL TECHNOLOGY
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products