With the rapid development of industry, the risks factories face are increasing. Therefore, the anomaly detection algorithms deployed in factories need to have high accuracy, and they need to be able to promptly discover and locate the specific equipment causing the anomaly to restore the regular operation of the abnormal equipment. However, the neural network models currently deployed in factories cannot effectively capture both temporal features within dimensions and relationship features between dimensions; some algorithms that consider both types of features lack interpretability. Therefore, we propose a high-precision, interpretable anomaly detection algorithm based on variational autoencoder (VAE). We use a multi-scale local weight-sharing convolutional neural network structure to fully extract the temporal features within each dimension of the multi-dimensional time series. Then, we model the features from various aspects through multiple attention heads, extracting the relationship features between dimensions. We map the attention output results to the latent space distribution of the VAE and propose an optimization method to improve the reconstruction performance of the VAE, detecting anomalies through reconstruction errors. Regarding anomaly interpretability, we utilize the VAE probability distribution characteristics, decompose the obtained joint probability density into conditional probabilities on each dimension, and calculate the anomaly score, which provides helpful value for technicians. Experimental results show that our algorithm performed best in terms of F1 score and AUC value. The AUC value for anomaly detection is 0.982, and the F1 score is 0.905, which is 4% higher than the best-performing baseline algorithm, Transformer with a Discriminator for Anomaly Detection (TDAD). It also provides accurate anomaly interpretation capability.

Industrial Control Systems (ICSs) have faced a significant increase in malware threats since their integration with the Internet. However, existing machine learning-based malware identification methods are not specifically optimized for ICS environments, resulting in suboptimal identification performance. In this work, we propose an innovative method explicitly tailored for ICSs to enhance the performance of malware classifiers within these systems. Our method integrates the opcode2vec method based on preprocessed features with a conditional variational autoencoder–generative adversarial network, enabling classifiers based on Convolutional Neural Networks to identify malware more effectively and with some degree of increased stability and robustness. Extensive experiments validate the efficacy of our method, demonstrating the improved performance of malware classifiers in ICSs. Our method achieved an accuracy of 97.30%, precision of 92.34%, recall of 97.44%, and F1-score of 94.82%, which are the highest reported values in the experiment.

With the rapid expansion of digital knowledge platforms and intelligent information systems, organizations and communities are producing a vast number of unstructured knowledge data, including annotated corpora, technical diagrams, collaborative whiteboard content, and domain-specific multimedia archives. However, knowledge sharing across institutions is hindered by privacy risks, high communication overhead, and fragmented ownership of data. Federated learning promises to overcome these barriers by enabling collaborative model training without exchanging raw knowledge artifacts, but its success depends on motivating data holders to undertake the additional computational and communication costs. Most existing incentive schemes, which are based on non-cooperative game formulations, neglect unstructured interactions and communication efficiency, thereby limiting their applicability in knowledge-driven scenarios. To address these challenges, we introduce SC-NBTI, a smart contract and Nash bargaining-based incentive framework for federated learning in knowledge collaboration environments. We cast the reward allocation problem as a cooperative game, devise a heuristic algorithm to approximate the NP-hard Nash bargaining solution, and integrate a probabilistic gradient sparsification method to trim communication costs while safeguarding privacy. Experiments on the FMNIST image classification task show that SC-NBTI requires fewer training rounds while achieving 5.89% higher accuracy than the DRL-Incentive baseline.

With the rapid advancement of industrial structures, many factories are deploying anomaly detection systems. However, most existing anomaly detection algorithms are unsuitable for high-noise industrial control system (ICS) environments and constantly changing sensor patterns, resulting in low detection accuracy. To address these challenges, we propose a hierarchical temporal memory-based online anomaly detection algorithm for ICS, incorporating cumulative distribution functions and Gaussian convolution kernels. We enhanced the encoding process of hierarchical temporal memory, enabling it to quickly fit the physical processes of ICS and remember the system's previous operating states for anomaly recognition. Additionally, our anomaly calculation algorithm, based on cumulative distribution functions and Gaussian kernel convolution, effectively addresses the adaptability and accuracy challenges posed by high-noise ICS environments. Experimental results demonstrate that our method outperforms the best baseline algorithms. While maintaining good time stability, our method achieves a 9$\%$ improvement in detection accuracy, highlighting its significant advantage in balancing detection precision and time performance.

The industrial control anomaly detection algorithm effectively monitors and identifies anomalies in industrial control systems, ensuring timely issue detection to maintain system reliability, safety, and regular operation. Researchers often integrate a large number of high-precision, high-sampling-frequency sensors into the system to obtain comprehensive real-time equipment operating data. However, deploying consumer-grade high-performance computing devices in large-scale industrial control systems is often impractical, rendering existing anomaly detection systems unusable in practical environments. Most existing sensor feature selection algorithms are unsuitable for industrial control time-series datasets, and some suffer from issues such as a limited reduction in the number of sensors and a decrease in anomaly detection accuracy after reduction. We propose an offline industrial control anomaly detection algorithm based on the maximal information coefficient and hierarchical clustering-deep neural network (MICHC-NN) to address these challenges. We utilize the maximum information coefficient to compute correlations among sensors, addressing the issue of existing feature selection algorithms relying on anomaly labels. In addition, we introduce a key-sensor selection algorithm based on correlation, identifying interrelated sensors in an industrial control system and determining the key sensors most susceptible to system anomalies. These key sensors allow the anomaly detection algorithm to be deployed with a smaller footprint in real industrial control environments. Finally, we employ an autoencoder–decoder model with attention mechanisms to train the anomaly detection network. Experimental results demonstrate that our proposed anomaly detection algorithm achieves performance comparable to using all sensors, with a 75% reduction in the number of sensors employed.