Dynamic, resilient sensing system for automatic cyber-attack neutralization

    公开(公告)号:US11411983B2

    公开(公告)日:2022-08-09

    申请号:US16654319

    申请日:2019-10-16

    Abstract: An industrial asset may have monitoring nodes that generate current monitoring node values. An abnormality detection computer may determine that an abnormal monitoring node is currently being attacked or experiencing fault. A dynamic, resilient estimator constructs, using normal monitoring node values, a latent feature space (of lower dimensionality as compared to a temporal space) associated with latent features. The system also constructs, using normal monitoring node values, functions to project values into the latent feature space. Responsive to an indication that a node is currently being attacked or experiencing fault, the system may compute optimal values of the latent features to minimize a reconstruction error of the nodes not currently being attacked or experiencing a fault. The optimal values may then be projected back into the temporal space to provide estimated values and the current monitoring node values from the abnormal monitoring node are replaced with the estimated values.

    Cyber-attack detection and neutralization

    公开(公告)号:US10771495B2

    公开(公告)日:2020-09-08

    申请号:US15454144

    申请日:2017-03-09

    Abstract: The example embodiments are directed to a system and method for neutralizing abnormal signals in a cyber-physical system. In one example, the method includes receiving input signals comprising time series data associated with an asset and transforming the input signals into feature values in a feature space, detecting one or more abnormal feature values in the feature space based on a predetermined normalcy boundary associated with the asset, and determining an estimated true value for each abnormal feature value, and performing an inverse transform of each estimated true value to generate neutralized signals comprising time series data and outputting the neutralized signals.

    DYNAMIC, RESILIENT SENSING SYSTEM FOR AUTOMATIC CYBER-ATTACK NEUTRALIZATION

    公开(公告)号:US20210120031A1

    公开(公告)日:2021-04-22

    申请号:US16654319

    申请日:2019-10-16

    Abstract: An industrial asset may have monitoring nodes that generate current monitoring node values. An abnormality detection computer may determine that an abnormal monitoring node is currently being attacked or experiencing fault. A dynamic, resilient estimator constructs, using normal monitoring node values, a latent feature space (of lower dimensionality as compared to a temporal space) associated with latent features. The system also constructs, using normal monitoring node values, functions to project values into the latent feature space. Responsive to an indication that a node is currently being attacked or experiencing fault, the system may compute optimal values of the latent features to minimize a reconstruction error of the nodes not currently being attacked or experiencing a fault. The optimal values may then be projected back into the temporal space to provide estimated values and the current monitoring node values from the abnormal monitoring node are replaced with the estimated values.

    Dynamic concurrent learning method to neutralize cyber attacks and faults for industrial asset monitoring nodes

    公开(公告)号:US10728282B2

    公开(公告)日:2020-07-28

    申请号:US15986996

    申请日:2018-05-23

    Abstract: Input signals may be received from monitoring nodes of the industrial asset, each input signal comprising time series data representing current operation. A neutralization engine may transform the input signals into feature vectors in feature space, each feature vector being associated with one of a plurality of overlapping batches of received input signals. A dynamic decision boundary may be generated based on the set of feature vectors, and an abnormal state of the asset may be detected based on the set of feature vectors and a predetermined static decision boundary. An estimated neutralized value for each abnormal feature value may be calculated based on the dynamic decision boundary and the static decision boundary such that a future set of feature vectors will be moved with respect to the static decision boundary. An inverse transform of each estimated neutralized value may be performed to generate neutralized signals comprising time series data that are output.

    GAS TURBINE DISPATCH OPTIMIZER
    7.
    发明申请

    公开(公告)号:US20180284706A1

    公开(公告)日:2018-10-04

    申请号:US15476084

    申请日:2017-03-31

    Abstract: A dispatch optimization system leverages ambient and market forecast data as well as asset performance and parts-life models to generate recommended operating schedules for gas turbines or other power-generating plant assets that substantially maximize profit while satisfying parts-life constraints. The system generates operating profiles that balance optimal peak fire opportunities with optimal cold part-load opportunities within a maintenance interval or other operating horizon. To reduce the computational burden associated with generating the profit-maximizing operating profile, the system uses an estimated price of life value that accounts for creation (by cold part-loading) and exhaustion (by peak fire operation) of factored fired hour credits by means of computing the cost of such credits.

    Cyber-attack detection, localization, and neutralization for unmanned aerial vehicles

    公开(公告)号:US10931687B2

    公开(公告)日:2021-02-23

    申请号:US15899903

    申请日:2018-02-20

    Abstract: In some embodiments, an Unmanned Aerial Vehicle (“UAV”) system may be associated with a plurality of monitoring nodes, each monitoring node generating a series of monitoring node values over time that represent operation of the UAV system. An attack detection computer platform may receive the series of current monitoring node values and generate a set of current feature vectors. The attack detection computer platform may access an attack detection model having at least one decision boundary (e.g., created using a set of normal feature vectors a set of attacked feature vectors). The attack detection model may then be executed and the platform may transmit an attack alert signal based on the set of current feature vectors and the at least one decision boundary. According to some embodiments, attack localization and/or neutralization functions may also be provided.

    Gas turbine dispatch optimizer real-time command and operations

    公开(公告)号:US10452041B2

    公开(公告)日:2019-10-22

    申请号:US15476124

    申请日:2017-03-31

    Abstract: A dispatch optimization system leverages ambient and market forecast data as well as asset performance and parts-life models to generate recommended operating schedules for gas turbines or other power-generating plant assets that substantially maximize profit while satisfying parts-life constraints. The system generates operating profiles that balance optimal peak fire opportunities with optimal cold part-load opportunities within a maintenance interval or other operating horizon. During real-time operation of the assets, the optimization system can update the operating schedule based on actual market, ambient, and operating data. The system provides information that can assist operators in determining suitable conditions in which to cold part-load or peak-fire the assets in an optimally profitable manner without violating target life constraints.

Patent Agency Ranking