{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,12]],"date-time":"2025-10-12T04:02:01Z","timestamp":1760241721431,"version":"build-2065373602"},"reference-count":28,"publisher":"MDPI AG","issue":"8","license":[{"start":{"date-parts":[[2018,7,27]],"date-time":"2018-07-27T00:00:00Z","timestamp":1532649600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["(CNS-1238959"],"award-info":[{"award-number":["(CNS-1238959"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>Detection errors such as false alarms and undetected faults are inevitable in any practical anomaly detection system. These errors can create potentially significant problems in the underlying application. In particular, false alarms can result in performing unnecessary recovery actions while missed detections can result in failing to perform recovery which can lead to severe consequences. In this paper, we present an approach for application-aware anomaly detection (AAAD). Our approach takes an existing anomaly detector and configures it to minimize the impact of detection errors. The configuration of the detectors is chosen so that application performance in the presence of detection errors is as close as possible to the performance that could have been obtained if there were no detection errors. We evaluate our result using a case study of real-time control of traffic signals, and show that the approach outperforms significantly several baseline detectors.<\/jats:p>","DOI":"10.3390\/s18082448","type":"journal-article","created":{"date-parts":[[2018,7,27]],"date-time":"2018-07-27T12:20:03Z","timestamp":1532694003000},"page":"2448","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":2,"title":["Application-Aware Anomaly Detection of Sensor Measurements in Cyber-Physical Systems"],"prefix":"10.3390","volume":"18","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-4442-0061","authenticated-orcid":false,"given":"Amin","family":"Ghafouri","sequence":"first","affiliation":[{"name":"Department of Electrical Engineering and Computer Science, Institute for Software Integrated Systems (ISIS), Vanderbilt University, Nashville, TN 37212, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7400-2357","authenticated-orcid":false,"given":"Aron","family":"Laszka","sequence":"additional","affiliation":[{"name":"Department of Computer Science, University of Houston, Houston, TX 77204, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0923-6293","authenticated-orcid":false,"given":"Xenofon","family":"Koutsoukos","sequence":"additional","affiliation":[{"name":"Department of Electrical Engineering and Computer Science, Institute for Software Integrated Systems (ISIS), Vanderbilt University, Nashville, TN 37212, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2018,7,27]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","unstructured":"Urbina, D.I., Giraldo, J.A., Cardenas, A.A., Tippenhauer, N.O., Valente, J., Faisal, M., Ruths, J., Candell, R., and Sandberg, H. (2016, January 24\u201328). Limiting the impact of stealthy attacks on industrial control systems. Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security (CCS), Vienna, Austria.","DOI":"10.1145\/2976749.2978388"},{"key":"ref_2","doi-asserted-by":"crossref","unstructured":"Laszka, A., Potteiger, B., Vorobeychik, Y., Amin, S., and Koutsoukos, X. (2016, January 11\u201314). Vulnerability of Transportation Networks to Traffic-Signal Tampering. Proceedings of the 2016 ACM\/IEEE 7th International Conference on Cyber-Physical Systems (ICCPS), Vienna, Austria.","DOI":"10.1109\/ICCPS.2016.7479122"},{"key":"ref_3","doi-asserted-by":"crossref","first-page":"15","DOI":"10.1145\/1541880.1541882","article-title":"Anomaly detection: A survey","volume":"41","author":"Chandola","year":"2009","journal-title":"ACM Comput. Surv. (CSUR)"},{"key":"ref_4","doi-asserted-by":"crossref","unstructured":"Laszka, A., Abbas, W., Sastry, S.S., Vorobeychik, Y., and Koutsoukos, X. (2016, January 19\u201321). Optimal Thresholds for Intrusion Detection Systems. Proceedings of the 3rd Annual Symposium and Bootcamp on the Science of Security (HotSoS), Pittsburgh, PA, USA.","DOI":"10.1145\/2898375.2898399"},{"key":"ref_5","doi-asserted-by":"crossref","unstructured":"Ghafouri, A., Abbas, W., Laszka, A., Vorobeychik, Y., and Koutsoukos, X. (2016, January 2\u20134). Optimal Thresholds for Anomaly-Based Intrusion Detection in Dynamical Environments. Proceedings of the 7th International Conference on Decision and Game Theory for Security (GameSec), New York, NY, USA.","DOI":"10.1007\/978-3-319-47413-7_24"},{"key":"ref_6","doi-asserted-by":"crossref","first-page":"556","DOI":"10.1061\/(ASCE)0733-9496(2008)134:6(556)","article-title":"The battle of the water sensor networks (BWSN): A design challenge for engineers and algorithms","volume":"134","author":"Ostfeld","year":"2008","journal-title":"J. Water Resour. Plan. Manag."},{"key":"ref_7","doi-asserted-by":"crossref","first-page":"449","DOI":"10.1016\/j.future.2015.06.006","article-title":"Robust cyber\u2013physical systems: Concept, models, and implementation","volume":"56","author":"Hu","year":"2016","journal-title":"Future Gener. Comput. Syst."},{"key":"ref_8","doi-asserted-by":"crossref","first-page":"2618","DOI":"10.1109\/TAC.2015.2498708","article-title":"On the performance degradation of cyber-physical systems under stealthy integrity attacks","volume":"61","author":"Mo","year":"2016","journal-title":"IEEE Trans. Autom. Control"},{"key":"ref_9","doi-asserted-by":"crossref","unstructured":"Goh, J., Adepu, S., Tan, M., and Lee, Z.S. (2017, January 12\u201314). Anomaly detection in cyber physical systems using recurrent neural networks. Proceedings of the 2017 IEEE 18th International Symposium on High Assurance Systems Engineering (HASE), Singapore.","DOI":"10.1109\/HASE.2017.36"},{"key":"ref_10","doi-asserted-by":"crossref","unstructured":"Kosek, A.M. (2016, January 12). Contextual anomaly detection for cyber-physical security in Smart Grids based on an artificial neural network model. Proceedings of the 2016 Joint Workshop on Cyber-Physical Security and Resilience in Smart Grids (CPSR-SG), Vienna, Austria.","DOI":"10.1109\/CPSRSG.2016.7684103"},{"key":"ref_11","doi-asserted-by":"crossref","unstructured":"Krishnamurthy, S., Sarkar, S., and Tewari, A. (2014, January 30). Scalable anomaly detection and isolation in cyber-physical systems using bayesian networks. Proceedings of the ASME 2014 Dynamic Systems and Control Conference, American Society of Mechanical Engineers, New York, NY, USA.","DOI":"10.1115\/DSCC2014-6365"},{"key":"ref_12","doi-asserted-by":"crossref","unstructured":"Jones, A., Kong, Z., and Belta, C. (2014, January 15\u201317). Anomaly detection in cyber-physical systems: A formal methods approach. Proceedings of the 2014 IEEE 53rd Annual Conference on Decision and Control (CDC), Los Angeles, CA, USA.","DOI":"10.1109\/CDC.2014.7039487"},{"key":"ref_13","doi-asserted-by":"crossref","first-page":"1210","DOI":"10.1109\/TAC.2016.2585083","article-title":"Temporal logics for learning and detection of anomalous behavior","volume":"62","author":"Kong","year":"2017","journal-title":"IEEE Trans. Autom. Control"},{"key":"ref_14","doi-asserted-by":"crossref","first-page":"42","DOI":"10.1016\/j.automatica.2018.03.024","article-title":"Design of robust fuzzy fault detection filter for polynomial fuzzy systems with new finite frequency specifications","volume":"93","author":"Chibani","year":"2018","journal-title":"Automatica"},{"key":"ref_15","doi-asserted-by":"crossref","first-page":"1608","DOI":"10.1002\/asjc.1311","article-title":"A finite frequency approach to H\u221e filtering for T\u2013S fuzzy systems with unknown inputs","volume":"18","author":"Chibani","year":"2016","journal-title":"Asian J. Control"},{"key":"ref_16","doi-asserted-by":"crossref","first-page":"805","DOI":"10.1109\/TFUZZ.2017.2690627","article-title":"Diagnostic Observer Design for T\u2013S Fuzzy Systems: Application to Real-Time-Weighted Fault-Detection Approach","volume":"26","author":"Li","year":"2018","journal-title":"IEEE Trans. Fuzzy Syst."},{"key":"ref_17","doi-asserted-by":"crossref","first-page":"55","DOI":"10.1145\/2542049","article-title":"A survey of intrusion detection techniques for cyber-physical systems","volume":"46","author":"Mitchell","year":"2014","journal-title":"ACM Comput. Surv."},{"key":"ref_18","first-page":"55","article-title":"Automatic construction of statechart-based anomaly detection models for multi-threaded industrial control systems","volume":"8","author":"Kleinmann","year":"2017","journal-title":"ACM Trans. Intell. Syst. Technol. (TIST)"},{"key":"ref_19","unstructured":"Lu, X.Y., Varaiya, P., Horowitz, R., and Palen, J. (2008, January 16\u201320). Faulty loop data analysis\/correction and loop fault detection. Proceedings of the 15th World Congress on Intelligent Transport Systems, New York, NY, USA."},{"key":"ref_20","unstructured":"Zygouras, N., Panagiotou, N., Zacheilas, N., Boutsis, I., Kalogeraki, V., Katakis, I., and Gunopulos, D. (2015, January 11). Towards Detection of Faulty Traffic Sensors in Real-Time. Proceedings of the 2nd International Conference on Mining Urban Data (MUD), Lille, France."},{"key":"ref_21","unstructured":"Robinson, S.P. (2006). The Development and Application of an Urban Link Travel Time Model Using Data Derived from Inductive Loop Detectors. [Ph.D. Thesis, University of London]."},{"key":"ref_22","doi-asserted-by":"crossref","first-page":"177","DOI":"10.1016\/j.trc.2013.08.014","article-title":"Max pressure control of a network of signalized intersections","volume":"36","author":"Varaiya","year":"2013","journal-title":"Transp. Res. Part C Emerging Technol."},{"key":"ref_23","first-page":"865","article-title":"Traffic flow prediction with big data: A deep learning approach","volume":"16","author":"Lv","year":"2015","journal-title":"IEEE Trans. Intell. Transp. Syst."},{"key":"ref_24","doi-asserted-by":"crossref","unstructured":"Ghafouri, A., Laszka, A., Dubey, A., and Koutsoukos, X. (2017, January 18\u201321). Optimal detection of faulty traffic sensors used in route planning. Proceedings of the 2nd International Workshop on Science of Smart City Operations and Platforms Engineering (SCOPE), Pittsburgh, PA, USA.","DOI":"10.1145\/3063386.3063767"},{"key":"ref_25","doi-asserted-by":"crossref","first-page":"606","DOI":"10.1016\/j.trc.2010.10.002","article-title":"Real-time road traffic prediction with spatio-temporal correlations","volume":"19","author":"Min","year":"2011","journal-title":"Transp. Res. Part C Emerging Technol."},{"key":"ref_26","unstructured":"Basseville, M., and Nikiforov, I.V. (1993). Detection of Abrupt Changes: Theory and Application, Prentice Hall."},{"key":"ref_27","unstructured":"Behrisch, M., Bieker, L., Erdmann, J., and Krajzewicz, D. (2011, January 23\u201328). SUMO\u2013simulation of urban mobility: an overview. Proceedings of the 3rd International Conference on Advances in System Simulation (SIMUL), Barcelona, Spain."},{"key":"ref_28","doi-asserted-by":"crossref","unstructured":"Widhalm, P., Koller, H., and Ponweiser, W. (July, January 29). Identifying faulty traffic detectors with Floating Car Data. Proceedings of the 2011 IEEE Forum on Integrated and Sustainable Transportation System (FISTS), Vienna, Austria.","DOI":"10.1109\/FISTS.2011.5973643"}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/18\/8\/2448\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T15:14:52Z","timestamp":1760195692000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/18\/8\/2448"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018,7,27]]},"references-count":28,"journal-issue":{"issue":"8","published-online":{"date-parts":[[2018,8]]}},"alternative-id":["s18082448"],"URL":"https:\/\/doi.org\/10.3390\/s18082448","relation":{},"ISSN":["1424-8220"],"issn-type":[{"type":"electronic","value":"1424-8220"}],"subject":[],"published":{"date-parts":[[2018,7,27]]}}}