METHOD OF DETECTING ANOMALIES IN CYBER-PHYSICAL SYSTEM IN REAL TIME Russian patent published in 2024 - IPC G06F21/50 H04L9/40 

FIELD: computer engineering.

SUBSTANCE: invention relates to computer engineering for information security. Randomly distributed stream of observations of CPS parameters is obtained in real time; when calling conditions are met, using the unloading criterion, the possibility of unloading the EITG node is checked, wherein the unloading criterion is checked taking into account the properties of the observation stream of the CPS parameters from the set of input parameters of the CPS; when the unloading criterion is met, the EITG node for which the said unloading criterion is met is unloaded; in each unloaded EITG node for each output parameter of the CPS from the set of output parameters of the CPS, calculating its value based on said unloaded EITG node, wherein each CPS output parameter is associated with the CPS input parameter; an anomaly in the CPS is detected in the values of the output parameters of the CPS reduced to the EITG using an anomaly detector.

EFFECT: bringing an arbitrarily distributed stream of observations of parameters of a cyberphysical system (CPS), arriving in real time, to an equi-interval time grid (EITG) and reducing the time of converting a randomly distributed stream of observations of CPS parameters arriving in real time to EITG.

20 cl, 14 dwg