Patent ID: 11874930
Assignee: BATTELLE ENERGY ALLIANCE, LLC
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 8:
9. An apparatus for monitoring a CPS, the apparatus comprising:
a processor; and
an anomaly detector configured for operation on the processor, the anomaly detector further configured to:
derive a physics-based correlation from a configuration of one or more physical components of the CPS, the physics-based correlation defining a mathematical relationship between a plurality of physical attributes of the CPS, the plurality of physical attributes comprising a first physical attribute and a second physical attribute;
acquire measurements of respective physical attributes of the plurality of physical attributes from the CPS, the measurements associated with a capture time;
apply the mathematical relationship defined between the plurality of physical attributes to determine an estimated value for the first physical attribute at the capture time based, at least in part, on a measurement of the second physical attribute associated with the capture time;
determine a first affinity metric for the capture time, the first affinity metric configured to quantify a degree to which the acquired measurements associated with the capture time conform to the mathematical relationship defined between the plurality of physical attributes by the physics-based correlation, wherein the first affinity metric is based, at least in part, on an error between a measurement of the first physical attribute associated with the capture time and the estimated value of the first physical attribute determined for the capture time; and
detect anomalous behavior of the CPS based, at least in part, on a health metric determined for the CPS, the health metric based, at least in part, on the first affinity metric and a second affinity metric, the second affinity metric configured to quantify a degree to which a cyber feature conforms with nominal behavior of an electronic communication network of the CPS.