The rapid development of Industry 4.0 has amplified the scope and destructiveness of industrial Cyber-Physical System (CPS) by network attacks. Anomaly detection techniques are employed to identify these attacks and guarantee the normal operation of industrial CPS. However, it is still a challenging problem to cope with scenarios with few labeled samples. In this paper, we propose a few-shot anomaly detection model (FSL-PN) based on prototypical network and contrastive learning for identifying anomalies with limited labeled data from industrial CPS. Specifically, we design a contrastive loss to assist the training process of the feature extractor and learn more fine-grained features to improve the discriminative performance. Subsequently, to tackle the overfitting issue during classifying, we construct a robust cost function with a specific regularizer to enhance the generalization capability. Experimental results based on two public imbalanced datasets with few-shot settings show that the FSL-PN model can significantly improve F1 score and reduce false alarm rate (FAR) for identifying anomalous signals to guarantee the security of industrial CPS.
翻译:工业4.0的迅速发展扩大了工业网络-物理系统(CPS)的范围和破坏性,通过网络攻击扩大了其范围和破坏力,使用异常的探测技术来查明这些攻击,保证工业CPS的正常运行。然而,用少数贴标签的样品来应付各种情况,仍然是一个具有挑战性的问题。在本文件中,我们提出一个基于原型网络的微小的异常探测模型(FSL-PN),并用对比性学习来识别工业CPS的标签数据有限的异常现象。具体地说,我们设计了一个对比性损失,以协助地物提取器的培训过程,并学习更多的精细精细的特性来改进歧视性能。随后,为了在分类过程中解决过分适应的问题,我们用一个特定的常规化器来构建一个强大的成本功能,以加强普遍化能力。基于两个公众不平衡的数据集的实验结果,这些数据集的光点数不见多,显示F1分和降低虚假的警报率(FAR),以便确定异常信号来保证工业CPS的安全。