Ge Infrastructure Technology, LLC

Ge Vernova Infrastructure Technology LLC

Justin Varkey John

Masoud Abbaszadeh

Weizhong Yan

Matthew Christian Nielsen

According to some embodiments, a system, method and non-transitory computer readable medium are provided comprising a plurality of real-time monitoring nodes to receive streams of monitoring node signal values over time that represent a current operation of the cyber physical system; a local status determination module to determine an anomaly status for one or more nodes; a global status determination module to determine an anomaly status for the cyber physical system; a threat detection computer platform to: receive the monitoring node signal values, generate feature vectors from the values; compare the feature vectors with at least one decision boundary associated with each of a local abnormal detection model and a global abnormal detection model; and transmit an abnormal alert signal from the local status determination module and the global status determination module based on a result of each comparison. Numerous other aspects are provided.

Unified multi-agent system for abnormality detection and isolation

According to some embodiments, a system, method, and non-transitory computer readable medium are provided comprising a plurality of real-time monitoring nodes to receive streams of monitoring node signal values over time that represent a current operation of the cyber physical system; and a threat detection computer platform, coupled to the plurality of real-time monitoring nodes, to: receive the monitoring node signal values; compute an anomaly score; compare the anomaly score with an adaptive threshold; and detect that one of a particular monitoring node and a system is outside a decision boundary based on the comparison, and classify that particular monitoring node or system as anomalous. Numerous other aspects are provided.

Growing community of inventors

Cohoes, NY, United States of America

Justin Varkey John