Search papers, labs, and topics across Lattice.
This paper tackles attack detection in cyber-physical systems by utilizing a model-structure-free approach, specifically through the application of TimesFM, a time-series foundation model. The authors derive optimal stealthy attack policies against a $蠂^2$ detector and empirically validate that the TimesFM-based detector outperforms traditional methods in detecting both model-free replay and model-based stealthy attacks. The findings are demonstrated on the IEEE 14-bus power system, highlighting the model's ability to substitute corrupted measurements effectively.
TimesFM can detect cyber-physical attacks with superior performance while operating without any prior knowledge of the system's model.
This paper addresses the problem of attack detection in cyber-physical systems without any knowledge of the plant model or its structure. A remotely located plant transmits sensor measurements to an operator over a network that is assumed to be under attack. We consider two classes of attacks: model-free replay attacks and model-based stealthy attacks. For the latter, we derive closed-form expressions for the optimal stealthy attack policy against a $蠂^2$ detector, for both linear and nonlinear systems. We then propose a model-structure-free detector based on TimesFM, a time-series foundation model developed by Google Research, which serves as a surrogate residual generator operating in a zero-shot fashion. We show empirically that the TimesFM-based detector achieves a comparable or superior attack detection performance. The efficacy of the proposed approach is demonstrated numerically on the IEEE 14-bus power system. We also demonstrate that TimesFM predictions can serve as a substitute for corrupted measurements, a practical mitigation technique when classical redundancy assumptions fail.
