journal article·2025-10-23Open access

Process Anomaly Detection in Cyber–Physical Production Systems Based on Conditional Discrete-Time Dynamic Graphs

Christian Goetz, Bernhard G. Humm

Applied Sciences· Volume 15· Issue 21

Abstract

Various types of anomalies can arise in cyber–physical production systems, caused by either faulty devices or incorrect processes. Anomalies within individual devices can often be detected by applying machine learning techniques to the respective produced multivariate time series. While this data typically shows temporal and spatial changes and can therefore be efficiently utilized by models, detecting anomalies within the process is often more challenging, as process data usually only consists of events, binary signals, or changes in unique process states. Due to the low variance of data, existing anomaly detection methods struggle to detect anomalies effectively and accurately. To address this challenge, in this paper, we propose a novel concept for process anomaly detection based on conditional discrete-time dynamic graphs. Through the conditional connections of the graph, essential characteristics can be generated and utilized to effectively train machine learning models to detect anomalies in the process data. Identified anomalies can be related to the current graph, facilitating transparent and explainable detections. By evaluating the concept against process data from an industrial unit and achieving an F1-Score of 0.96 and 1 for the realized repetitive processes, the accuracy and effectiveness of the concept can be demonstrated.
Source: crossref · Quality: baseline

Research context

OpenAlex topics: Anomaly Detection Techniques and Applications · Network Security and Intrusion Detection · Smart Grid Security and Resilience

SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.

Affiliations

Department of Computer Science, Darmstadt University of Applied Sciences, Schöfferstr. 3, 64295 Darmstadt, Germany

Yaskawa Europe GmbH, Philipp-Reis-Str. 6, 65795 Hattersheim am Main, Germany

References (36)

Show source-provided references
1. How many diagnoses do we need?10.1016/j.artint.2017.03.002 ↗
2. Anomaly detection10.1145/1541880.1541882 ↗
3. Active Anomaly Detection in Heterogeneous Processes10.1109/TIT.2018.2866257 ↗
4. Cassandras, C.G., and Lafortune, S. (2008). Introduction to Discrete Event Systems, Springer.10.1007/978-0-387-68612-7 ↗
5. Klerx, T., Anderka, M., Buning, H.K., and Priesterjahn, S. (2014, January 10–12). Model-Based Anomaly Detection for Discrete Event Systems. Proceedings of the 2014 IEEE 26th International Conference on Tools with Artificial Intelligence, Limassol, Cyprus.10.1109/ICTAI.2014.105 ↗
6. Moallemi, A., Burrello, A., Brunelli, D., and Benini, L. (2021, January 17–20). Model-based vs. Data-driven Approaches for Anomaly Detection in Structural Health Monitoring: A Case Study. Proceedings of the 2021 IEEE International Instrumentation and Measurement Technology Conference (I2MTC), Glasgow, UK.10.1109/I2MTC50364.2021.9459999 ↗
7. Hranisavljevic, N., Niggemann, O., and Maier, A. (2016, January 4–7). A Novel Anomaly Detection Algorithm for Hybrid Production Systems based on Deep Learning and Timed Automata. Proceedings of the 27th International Workshop on Principles of Diagnosis: DX-2016, Denver, CO, USA.
8. Wu, L., Cui, P., Pei, J., and Zhao, L. (2022). Graph Neural Networks: Foundations, Frontiers, and Applications, Springer.10.1007/978-981-16-6054-2 ↗
9. Unsupervised Correlation- and Interaction-Aware Anomaly Detection for Cyber-Physical Production Systems based on Graph Neural Networks10.1016/j.procs.2024.02.028 ↗
10. IoT anomaly detection methods and applications: A survey10.1016/j.iot.2022.100568 ↗
11. A Unifying Review of Deep and Shallow Anomaly Detection10.1109/JPROC.2021.3052449 ↗
12. A Review on Outlier/Anomaly Detection in Time Series Data
13. Multi-head CNN–RNN for multi-time series anomaly detection: An industrial case study10.1016/j.neucom.2019.07.034 ↗
14. Wen, Q., Zhou, T., Zhang, C., Chen, W., Ma, Z., Yan, J., and Sun, L. (2023, January 19–25). Transformers in time series: A survey. Proceedings of the Thirty-Second International Joint Conference on Artificial Intelligenc, Macao.10.24963/ijcai.2023/759 ↗
15. FEDformer: Frequency Enhanced Decomposed Transformer for Long-term Series Forecasting
16. Wang, Z., Chen, Z., Ni, J., Liu, H., Chen, H., and Tang, J. (2021, January 14–18). Multi-Scale One-Class Recurrent Neural Networks for Discrete Event Sequence Anomaly Detection. Proceedings of the 27th ACM SIGKDD Conference on Knowledge Discovery and Data Mining, Singapore.10.1145/3447548.3467125 ↗
17. Variational transformer-based anomaly detection approach for multivariate time series10.1016/j.measurement.2022.110791 ↗
18. Time-series anomaly detection with stacked Transformer representations and 1D convolutional network10.1016/j.engappai.2023.105964 ↗
19. Transformer-based multivariate time series anomaly detection using inter-variable attention mechanism10.1016/j.knosys.2024.111507 ↗
20. Goetz, C., and Humm, B.G. (2023). Decentralized Real-Time Anomaly Detection in Cyber-Physical Production Systems under Industry Constraints. Sensors, 23.10.3390/s23094207 ↗
21. Knowledge-based anomaly detection: Survey, challenges, and future directions10.1016/j.engappai.2024.108996 ↗
22. Specification-Based Monitoring of Cyber-Physical Systems: A Survey on Theory, Tools and Applications10.1007/978-3-319-75632-5_5 ↗
23. Petri nets and Automatic Control: A historical perspective10.1016/j.arcontrol.2018.04.006 ↗
24. Towards timed fuzzy Petri net algorithms for chemical abnormality monitoring10.1016/j.eswa.2011.02.028 ↗
25. A theory of timed automata10.1016/0304-3975(94)90010-8 ↗
26. Intrusion Detection in Internet of Things With MQTT Protocol—An Accurate and Interpretable Genetic-Fuzzy Rule-Based Solution10.1109/JIOT.2022.3194837 ↗
27. Online hazard prediction of train operations with parametric hybrid automata based runtime verification10.1016/j.ress.2023.109621 ↗
28. Model-Based Diagnosis for Cyber-Physical Production Systems Based on Machine Learning and Residual-Based Diagnosis Models
29. Westermann, T., Gill, M.S., and Fay, A. (2023, January 16–19). Representing Timed Automata and Timing Anomalies of Cyber-Physical Production Systems in Knowledge Graphs. Proceedings of the IECON 2023- 49th Annual Conference of the IEEE Industrial Electronics Society, Singapore.10.1109/IECON51785.2023.10312156 ↗
30. Industrial Control System Attack Detection Model Based on Bayesian Network and Timed Automata10.1007/978-3-030-96282-1_6 ↗
31. A Comprehensive Survey on Graph Anomaly Detection With Deep Learning10.1109/TKDE.2021.3118815 ↗
32. The Graph Neural Network Model10.1109/TNN.2008.2005605 ↗
33. Graph Neural Network-Based Anomaly Detection in Multivariate Time Series
34. Anomaly detection with convolutional Graph Neural Networks10.1007/JHEP08(2021)080 ↗
35. Graph Neural Networks for Anomaly Detection in Industrial Internet of Things10.1109/JIOT.2021.3094295 ↗
36. Goetz, C., and Humm, B.G. (2025). A Hybrid and Modular Integration Concept for Anomaly Detection in Industrial Control Systems. AI, 6.10.3390/ai6050091 ↗