针对故障诊断系统的数据潜在特征过滤防御策略OA
Defense Strategy for Filtering Potential Features of Data in Fault Diagnosis Systems
基于数据驱动的故障诊断模型广泛应用于现代工业,显著提升了故障诊断系统的准确性.但数据驱动的故障诊断模型易受对抗攻击影响,即样本上的微小扰动易导致模型输出错误的预测结果.现有防御方法主要集中于图像、声音和文本领域,难以有效应对工业故障诊断系统中的对抗攻击问题.为此,文中提出了一种基于自动编码器的防御方法,通过学习样本潜在分类特征来抵御对抗扰动.该方法引入了一种自动编码器结构,在编码阶段通过编码器和攻击鉴别器的对抗学习机制提取样本的潜在分类特征.在解码阶段,利用解码器和样本鉴别器形成对抗学习机制,将样本恢复为干净样本.通过在田纳西依斯曼数据集的实验结果可知,故障诊断系统在面对8种攻击扰动时诊断正确率提高了46.49百分点,验证了所提方法的有效性和适用性,为提升故障诊断系统的安全性提供了新思路和方向.
Data-driven fault diagnosis models are widely applied in modern industry,significantly enhancing the accuracy of fault diagnosis systems.However,data-driven fault diagnosis models are vulnerable to adversarial attacks,that is minor disturbances on samples can easily lead to incorrect prediction results output by the model.The existing defense methods mainly focus on the fields of images,sounds and texts,and are difficult to effectively deal with the adversarial attack problems in industrial fault diagnosis systems.A defense method based on an auto-encoder is proposed to resist adversarial perturbations by learning the latent classification features of samples.An autoencoder structure is introduced to extract the potential classification features of samples through the adversarial learning mechanism of the encoder and the attack discriminator in the encoding stage.In the decoding stage,an ad-versarial learning mechanism is formed by using the decoder and the sample discriminator to restore the sample to a clean one.Through experiments on the Tennessee Isman dataset,it can be known that the diagnostic accuracy rate of the fault diagnosis system has increased by 46.49 percentage points when facing eight types of attack disturbanc-es,verifying the effectiveness and applicability of the proposed method,and providing new ideas and directions for improving the security of the fault diagnosis system.
贾天源;田颖
上海理工大学 光电信息与计算机工程学院,上海 200093上海理工大学 光电信息与计算机工程学院,上海 200093
信息技术与安全科学
故障诊断系统对抗攻击对抗样本对抗训练防御策略自动编码器编码器解码器
fault diagnosis systemadversarial attackadversarial exampleadversarial trainingdefense strategyautoencoderencoderdecoder
《电子科技》 2026 (8)
40-46,7
国家自然科学基金(61903251)National Natural Science Foundation of China(61903251)
评论