System and method for determining anomaly source in cyber-physical system having certain characteristics

Abstract

Systems and methods for determining a source of anomaly in a cyber-physical system (CPS) are disclosed. A forecasting tool can obtain a plurality of CPS feature values during an input window and forecast the plurality of CPS feature values for a forecast window. An anomaly identification tool can determine a total forecast error for the plurality of CPS features in the forecast window, identify ananomaly in the cyber-physical system when the total forecast error exceeds a total error threshold, and identify at least one CPS feature as the source of the anomaly.

Description

[0001] related application [0002] This patent application claims the priority of the Russian Federation patent filed on December 28, 2018 with the patent application number RU2018147248, which is fully incorporated herein by reference. technical field [0003] Embodiments relate generally to the field of computer security, and more specifically, to the security of cyber-physical systems. Background technique [0004] The safe operation of technical processes (TP) is one of the current industrial security issues. For example, TPs in the petrochemical industry usually have a high process hazard rate because they involve flammable and explosive liquids as well as high-temperature and high-pressure gases. The main threats faced by this TP include: unintentional errors or malicious operations in operation control; wear and failure of equipment and devices; network attacks on control systems and information systems, etc. [0005] Security systems for cyber-physical systems (C...

AI Technical Summary

Problems solved by technology

For example, due to cyber-attacks, IoT sensors can provide incorrect values, which can lead to incorrect operation of IoT computer equipment, which in turn can lead to problems such as increased power consumption, unauthorized access to information, etc.

Images