Skip to main content
U.S. flag

An official website of the United States government

Dot gov

The .gov means it’s official.
Federal government websites often end in .gov or .mil. Before sharing sensitive information, make sure you’re on a federal government site.

Https

The site is secure.
The https:// ensures that you are connecting to the official website and that any information you provide is encrypted and transmitted securely.

Conflict-driven Hybrid Observer-based Anomaly Detection

Published

Author(s)

Dhananjay Anand, Zheng Wang, Dawn Tilbury, James Moyne, CheeYee Tang

Abstract

This paper presents an anomaly detection method using a hybrid observer – comprised of state observers for both discrete and continuous states. We focus our attention on anomalies caused by intelligent attacks that use knowledge of the system behavior to evade anomaly detection methods that independently classify either the event sequence or the observed residuals as anomalous. In contrast, our approach uses the relation between the continuous and discrete variables to detect conditions we define as conflicts. This paper demonstrates the effectiveness of our conflict-driven anomaly detection method mathematically as well as through an illustrative hybrid model of a Train-Gate (TG) system. We analyze our detection method against three conflict types and give the conditions under which the detection of anomalies is guaranteed.
Proceedings Title
Proceedings of the American Control Conference
Conference Dates
July 2-6, 2018
Conference Location
Milwakee, WI
Conference Title
American Control Conference
Created June 25, 2018, Updated May 16, 2018