Using behavior models for anomaly detection in hybrid systems

The importance of safety and reliability in today's real-world complex hybrid systems, such as process plants, led to the development of various anomaly detection and diagnosis techniques. Model-based approaches established themselves among the most successful ones in the field. However, they depend on a model of a system, which usually needs to be derived manually. Manual modeling requires a lot of efforts and resources. This paper gives a procedure for anomaly detection in hybrid systems that uses automatically generated behavior models. The model is learned from logged system's measurements in a hybrid automaton framework. The presented anomaly detection algorithm utilizes the model to predict the system behavior, and to compare it with the observed behavior in an online manner. Alarms are raised whenever a discrepancy is found between these two. The effectiveness of this approach is demonstrated in detecting several types of anomalies in a real-world running production system.

[1]  Thomas A. Henzinger,et al.  The Algorithmic Analysis of Hybrid Systems , 1995, Theor. Comput. Sci..

[2]  Rajeev Alur,et al.  A Theory of Timed Automata , 1994, Theor. Comput. Sci..

[3]  P. Supavatanakula,et al.  Diagnosis of timed automata : Theory and application to the DAMADICS actuator benchmark problem , 2004 .

[4]  François E. Cellier,et al.  Continuous system modeling , 1991 .

[5]  Melvin Michael Henry,et al.  Model-based Estimation of Probabilistic Hybrid Automata , 2002 .

[6]  Robert Tibshirani,et al.  The Elements of Statistical Learning: Data Mining, Inference, and Prediction, 2nd Edition , 2001, Springer Series in Statistics.

[7]  E. Mark Gold,et al.  Complexity of Automaton Identification from Given Data , 1978, Inf. Control..

[8]  Hans Kleine Büning,et al.  Identifying behavior models for process plants , 2011, ETFA2011.

[9]  Feng Zhao,et al.  Monitoring and fault diagnosis of hybrid systems , 2005, IEEE Transactions on Systems, Man, and Cybernetics, Part B (Cybernetics).

[10]  Raymond Reiter,et al.  A Theory of Diagnosis from First Principles , 1986, Artif. Intell..

[11]  Fulvio Cascio,et al.  Model-Based Diagnosis for Automotive Repair , 1997, IEEE Expert.

[12]  A. Madansky.  Identification of Outliers , 1988 .

[13]  Rasul Mohammadi.  Fault diagnosis of hybrid systems with applications to gas turbine engines , 2009 .

[14]  José Oncina,et al.  Learning deterministic regular grammars from stochastic samples in polynomial time , 1999, RAIRO Theor. Informatics Appl..

[15]  R. Dearden,et al.  Detecting and Learning Unknown Fault States in Hybrid Diagnosis , 2009 .

[16]  Pieter J. Mosterman,et al.  Towards Procedures for Systematically Deriving Hybrid Models of Complex Systems , 2000, HSCC.

[17]  Gautam Biswas,et al.  Model-Based Diagnosis of Hybrid Systems , 2003, IEEE Transactions on Systems, Man, and Cybernetics - Part A: Systems and Humans.

[18]  Peter Struss,et al.  Diagnosis of Bottling Plants - First Success and Challenges , 2009 .

[19]  Wpmh Maurice Heemels,et al.  Introduction to hybrid systems , 2009 .

[20]  I. V. Ramakrishnan,et al.  Learning Cycle-Linear Hybrid Automata for Excitable Cells , 2007, HSCC.

[21]  Shahin Hashtrudi-Zad,et al.  Fault diagnosis in discrete-event systems: framework and model reduction , 2003, IEEE Trans. Autom. Control..

[22]  Dana Angluin,et al.  Learning Regular Sets from Queries and Counterexamples , 1987, Inf. Comput..

[23]  Cem M. Baydar,et al.  Prediction and Diagnosis of Propagated Errors in Assembly Systems Using Virtual Factories , 2001, J. Comput. Inf. Sci. Eng..

[24]  Rolf Isermann,et al.  Fault-diagnosis systems : an introduction from fault detection to fault tolerance , 2006 .

[25]  Colin de la Higuera,et al.  Probabilistic DFA Inference using Kullback-Leibler Divergence and Minimality , 2000, ICML.

[26]  Sicco Verwer.  Efficient Identification of Timed Automata: Theory and practice , 2010 .

[27]  Stavros Tripakis,et al.  Fault Diagnosis for Timed Automata , 2002, FTRTFT.

[28]  Oliver Niggemann,et al.  Statistical Models of Network Traffic , 2010 .

[29]  Brian C. Williams,et al.  Diagnosing Multiple Faults , 1987, Artif. Intell..

[30]  Ashutosh Kumar Singh,et al.  The Elements of Statistical Learning: Data Mining, Inference, and Prediction , 2010 .

[31]  Franz Wotawa,et al.  Model-Based Diagnosis or Reasoning from First Principles , 2003, IEEE Intell. Syst..

[32]  Brian C. Williams,et al.  Mode Estimation of Probabilistic Hybrid Systems , 2002, HSCC.