Cyber-Physical Systems Security: A Comprehensive Review of Anomaly Detection Techniques

Abstract

In an increasingly interconnected world, Cyber-Physical Systems (CPS) are essential to critical industries like healthcare, transportation, and manufacturing, merging physical processes with computational intelligence. However, the security of these systems is a major concern. Anomalies, whether from sensor malfunctions or cyberattacks, can lead to catastrophic failures, making effective detection vital for preventing harm and service disruptions. This paper provides a comprehensive review of anomaly detection techniques in CPS. We categorize and compare various methods, including data-driven approaches (machine learning, deep learning, machine learning-deep learning ensemble), model-driven approaches (mathematical, invariant-based), hybrid datamodel approaches (Physics-Informed Neural Networks), and system-oriented approaches. Our analysis highlights the strengths and weaknesses of each technique, offering a practical guide for creating safer and more reliable systems. By identifying current research gaps, we aim to inspire future work that will enhance the security and adaptability of CPS in our automated world.

References in corpus (11)

• Knowledge Distillation: A Survey
• Edge Intelligence: The Confluence of Edge Computing and Artificial Intelligence
• Extended Isolation Forest
• IoT Anomaly Detection Methods and Applications: A Survey
• Smart Anomaly Detection in Sensor Systems: A Multi-Perspective Review
• A Survey on Industrial Control System Testbeds and Datasets for Security Research
• Real-Time Sensor Anomaly Detection and Recovery in Connected Automated Vehicle Sensors
• Constrained Concealment Attacks against Reconstruction-based Anomaly Detectors in Industrial Control Systems
• ICSSIM-A Framework for Building Industrial Control Systems Security Simulation Testbeds
• Adaptive Anomaly Detection for Identifying Attacks in Cyber-Physical Systems: A Systematic Literature Review
• MTS-DVGAN: Anomaly Detection in Cyber-Physical Systems using a Dual Variational Generative Adversarial Network