TY - GEN
T1 - Distributed Anomaly Detection and Estimation over Sensor Networks : Observational-Equivalence and Q-Redundant Observer Design
AU - Doostmohammadian, Mohammadreza
AU - Charalambous, Themistoklis
N1 - Publisher Copyright:
© 2022 EUCA.
PY - 2022/8/5
Y1 - 2022/8/5
N2 - In this paper, we study stateless and stateful physics-based anomaly detection scenarios via distributed estimation over sensor networks. In the stateful case, the detector keeps track of the sensor residuals (i.e., the difference of estimated and true outputs) and reports an alarm if certain statistics of the recorded residuals deviate over a predefined threshold, e.g., χ2 (Chi-square) detector. Instead, only instantaneous deviation of the residuals raises the alarm in the stateless case without considering the history of the sensor outputs and estimation data. Given (approximate) false-alarm rate for both cases, we propose a probabilistic threshold design based on the noise statistics. We show by simulation that increasing the window length in the stateful case may not necessarily reduce the false-alarm rate. On the other hand, it adds unwanted delay to raise the alarm. The distributed aspect of the proposed detection algorithm enables local isolation of the faulty sensors with possible recovery solutions by adding redundant observationally-equivalent sensors. We, then, offer a mechanism to design Q-redundant distributed observers, robust to failure (or removal) of up to Q sensors over the network.
AB - In this paper, we study stateless and stateful physics-based anomaly detection scenarios via distributed estimation over sensor networks. In the stateful case, the detector keeps track of the sensor residuals (i.e., the difference of estimated and true outputs) and reports an alarm if certain statistics of the recorded residuals deviate over a predefined threshold, e.g., χ2 (Chi-square) detector. Instead, only instantaneous deviation of the residuals raises the alarm in the stateless case without considering the history of the sensor outputs and estimation data. Given (approximate) false-alarm rate for both cases, we propose a probabilistic threshold design based on the noise statistics. We show by simulation that increasing the window length in the stateful case may not necessarily reduce the false-alarm rate. On the other hand, it adds unwanted delay to raise the alarm. The distributed aspect of the proposed detection algorithm enables local isolation of the faulty sensors with possible recovery solutions by adding redundant observationally-equivalent sensors. We, then, offer a mechanism to design Q-redundant distributed observers, robust to failure (or removal) of up to Q sensors over the network.
KW - Anomaly detection
KW - networked estimation
KW - observational-equivalence
KW - q-redundant observability
UR - http://www.scopus.com/inward/record.url?scp=85130335700&partnerID=8YFLogxK
U2 - 10.23919/ECC55457.2022.9838396
DO - 10.23919/ECC55457.2022.9838396
M3 - Conference article in proceedings
AN - SCOPUS:85130335700
SN - 978-1-6654-9733-6
T3 - 2022 European Control Conference, ECC 2022
SP - 460
EP - 465
BT - 2022 European Control Conference, ECC 2022
PB - IEEE
T2 - European Control Conference
Y2 - 12 July 2022 through 15 July 2022
ER -