Abstract: An industrial asset may have monitoring nodes that generate current monitoring node values. An abnormality detection computer may determine that an abnormal monitoring node is currently being attacked or experiencing fault. A dynamic, resilient estimator constructs, using normal monitoring node values, a latent feature space (of lower dimensionality as compared to a temporal space) associated with latent features. The system also constructs, using normal monitoring node values, functions to project values into the latent feature space. Responsive to an indication that a node is currently being attacked or experiencing fault, the system may compute optimal values of the latent features to minimize a reconstruction error of the nodes not currently being attacked or experiencing a fault. The optimal values may then be projected back into the temporal space to provide estimated values and the current monitoring node values from the abnormal monitoring node are replaced with the estimated values.

Abstract: A method of energy dispatch for an energy storage device component of a local energy generation plant, the method including obtaining a charge/discharge profile for the energy storage device, quantifying an amount of energy generation available from energy source components of the local energy generation plant, accessing a degradation factor for the energy storage device, forecasting a future cost for storing energy in the energy storage device, evaluating the future cost, providing instruction to an energy storage plant control unit to increase energy storage in the energy storage device based on a result of the evaluation, else, instructing the energy storage plant control unit to decrease energy storage in the energy storage device, and shedding power from the energy source components if a recommendation to shed power was provided. A system for implementing the method and a non-transitory computer-readable medium are also disclosed.

Abstract: An industrial asset may have monitoring nodes that generate current monitoring node values. An abnormality detection computer may determine that an abnormal monitoring node is currently being attacked or experiencing fault. A dynamic, resilient estimator constructs, using normal monitoring node values, a latent feature space (of lower dimensionality as compared to a temporal space) associated with latent features. The system also constructs, using normal monitoring node values, functions to project values into the latent feature space. Responsive to an indication that a node is currently being attacked or experiencing fault, the system may compute optimal values of the latent features to minimize a reconstruction error of the nodes not currently being attacked or experiencing a fault. The optimal values may then be projected back into the temporal space to provide estimated values and the current monitoring node values from the abnormal monitoring node are replaced with the estimated values.

Abstract: In some embodiments, an Unmanned Aerial Vehicle (“UAV”) system may be associated with a plurality of monitoring nodes, each monitoring node generating a series of monitoring node values over time that represent operation of the UAV system. An attack detection computer platform may receive the series of current monitoring node values and generate a set of current feature vectors. The attack detection computer platform may access an attack detection model having at least one decision boundary (e.g., created using a set of normal feature vectors a set of attacked feature vectors). The attack detection model may then be executed and the platform may transmit an attack alert signal based on the set of current feature vectors and the at least one decision boundary. According to some embodiments, attack localization and/or neutralization functions may also be provided.

Abstract: A convoy management system and method determine determining an inter-vehicle spacing in a convoy formed from two or more vehicles traveling together along one or more routes. Controllers onboard the two or more vehicles are instructed to automatically change movement of at least one of the vehicles in the convoy to maintain the inter-vehicle spacing. The inter vehicle spacing is dynamically changed during movement of the convoy along the one or more routes.

Abstract: The example embodiments are directed to a system and method for neutralizing abnormal signals in a cyber-physical system. In one example, the method includes receiving input signals comprising time series data associated with an asset and transforming the input signals into feature values in a feature space, detecting one or more abnormal feature values in the feature space based on a predetermined normalcy boundary associated with the asset, and determining an estimated true value for each abnormal feature value, and performing an inverse transform of each estimated true value to generate neutralized signals comprising time series data and outputting the neutralized signals.

Abstract: Input signals may be received from monitoring nodes of the industrial asset, each input signal comprising time series data representing current operation. A neutralization engine may transform the input signals into feature vectors in feature space, each feature vector being associated with one of a plurality of overlapping batches of received input signals. A dynamic decision boundary may be generated based on the set of feature vectors, and an abnormal state of the asset may be detected based on the set of feature vectors and a predetermined static decision boundary. An estimated neutralized value for each abnormal feature value may be calculated based on the dynamic decision boundary and the static decision boundary such that a future set of feature vectors will be moved with respect to the static decision boundary. An inverse transform of each estimated neutralized value may be performed to generate neutralized signals comprising time series data that are output.

Abstract: According to some embodiments, a system, method and non-transitory computer-readable medium are provided comprising one or more heterogeneous data source nodes generating data associated with operation of the medical device; an abnormal state detection, prediction and correction module to receive data from one or more heterogeneous data source nodes; a memory for storing program instructions; and an abnormal state processor, coupled to the memory, and in communication with the abnormal state detection, prediction and correction module and operative to execute program instructions to: receive data from one or more heterogeneous data source nodes; receive a decision manifold separating a normal operating space from an abnormal operating space; perform a feature extraction process on the received data to generate at least one feature vector; determine, via the abnormal state detection, prediction and correction module, whether the feature vector maps to the normal operating space or the abnormal operating space

Abstract: According to some embodiments, a plurality of heterogeneous data source nodes may each generate a series of current data source node values over time that represent a current operation of an electric power grid. A real-time threat detection computer, coupled to the plurality of heterogeneous data source nodes, may receive the series of current data source node values and generate a set of current feature vectors. The threat detection computer may then access an abnormal state detection model having at least one decision boundary created offline using at least one of normal and abnormal feature vectors. The abnormal state detection model may be executed, and a threat alert signal may be transmitted if appropriate based on the set of current feature vectors and the at least one decision boundary.

Abstract: A dispatch optimization system leverages ambient and market forecast data as well as asset performance and parts-life models to generate recommended operating schedules for gas turbines or other power-generating plant assets that substantially maximize profit while satisfying parts-life constraints. The system generates operating profiles that balance optimal peak fire opportunities with optimal cold part-load opportunities within a maintenance interval or other operating horizon. During real-time operation of the assets, the optimization system can update the operating schedule based on actual market, ambient, and operating data. The system provides information that can assist operators in determining suitable conditions in which to cold part-load or peak-fire the assets in an optimally profitable manner without violating target life constraints.

Abstract: In some embodiments, an Unmanned Aerial Vehicle (“UAV”) system may be associated with a plurality of monitoring nodes, each monitoring node generating a series of monitoring node values over time that represent operation of the UAV system. An attack detection computer platform may receive the series of current monitoring node values and generate a set of current feature vectors. The attack detection computer platform may access an attack detection model having at least one decision boundary (e.g., created using a set of normal feature vectors a set of attacked feature vectors). The attack detection model may then be executed and the platform may transmit an attack alert signal based on the set of current feature vectors and the at least one decision boundary. According to some embodiments, attack localization and/or neutralization functions may also be provided.

Abstract: Input signals may be received from monitoring nodes of the industrial asset, each input signal comprising time series data representing current operation. A neutralization engine may transform the input signals into feature vectors in feature space, each feature vector being associated with one of a plurality of overlapping batches of received input signals. A dynamic decision boundary may be generated based on the set of feature vectors, and an abnormal state of the asset may be detected based on the set of feature vectors and a predetermined static decision boundary. An estimated neutralized value for each abnormal feature value may be calculated based on the dynamic decision boundary and the static decision boundary such that a future set of feature vectors will be moved with respect to the static decision boundary. An inverse transform of each estimated neutralized value may be performed to generate neutralized signals comprising time series data that are output.

Abstract: A convoy management system and method determine determining an inter-vehicle spacing in a convoy formed from two or more vehicles traveling together along one or more routes. Controllers onboard the two or more vehicles are instructed to automatically change movement of at least one of the vehicles in the convoy to maintain the inter-vehicle spacing. The inter-interview spacing is dynamically changed during movement of the convoy along the one or more routes.

Abstract: A dispatch optimization system leverages ambient and market forecast data as well as asset performance and parts-life models to generate recommended operating schedules for gas turbines or other power-generating plant assets that substantially maximize profit while satisfying parts-life constraints. The system generates operating profiles that balance optimal peak fire opportunities with optimal cold part-load opportunities within a maintenance interval or other operating horizon. To reduce the computational burden associated with generating the profit-maximizing operating profile, the system uses an estimated price of life value that accounts for creation (by cold part-loading) and exhaustion (by peak fire operation) of factored fired hour credits by means of computing the cost of such credits.

Abstract: A dispatch optimization system leverages ambient and market forecast data as well as asset performance and parts-life models to generate recommended operating schedules for gas turbines or other power-generating plant assets that substantially maximize profit while satisfying parts-life constraints. The system generates operating profiles that balance optimal peak fire opportunities with optimal cold part-load opportunities within a maintenance interval or other operating horizon. During real-time operation of the assets, the optimization system can update the operating schedule based on actual market, ambient, and operating data. The system provides information that can assist operators in determining suitable conditions in which to cold part-load or peak-fire the assets in an optimally profitable manner without violating target life constraints.

Abstract: According to some embodiments, a plurality of heterogeneous data source nodes may each generate a series of current data source node values over time that represent a current operation of an electric power grid. A real-time threat detection computer, coupled to the plurality of heterogeneous data source nodes, may receive the series of current data source node values and generate a set of current feature vectors. The threat detection computer may then access an abnormal state detection model having at least one decision boundary created offline using at least one of normal and abnormal feature vectors. The abnormal state detection model may be executed, and a threat alert signal may be transmitted if appropriate based on the set of current feature vectors and the at least one decision boundary.

Abstract: The example embodiments are directed to a system and method for neutralizing abnormal signals in a cyber-physical system. In one example, the method includes receiving input signals comprising time series data associated with an asset and transforming the input signals into feature values in a feature space, detecting one or more abnormal feature values in the feature space based on a predetermined normalcy boundary associated with the asset, and determining an estimated true value for each abnormal feature value, and performing an inverse transform of each estimated true value to generate neutralized signals comprising time series data and outputting the neutralized signals.