Imperceptible Attacks on Fault Detection and Diagnosis Systems in Smart Buildings

• Published in: IEEE transactions on industrial informatics 2024-02, Vol.20 (2), p.2167-2176
• Main Authors: Alkhouri, Ismail R., Awad, Akram S., Sun, Qun Z., Atia, George K.
• Format: Article
• Language: English
• Subjects: Additives; adversarial additive disturbances; Algorithms; Alternating direction method of multipliers (ADMM); Building components; Disturbances; Fault detection; Fault diagnosis; hierarchical fault detection and diagnosis (HFDD); Informatics; Kernel; Mathematical models; Perturbation; Perturbation methods; Robustness (mathematics); Smart buildings
• ISSN: 1551-3203; 1941-0050
• DOI: 10.1109/TII.2023.3288221

Automated fault detection and diagnosis systems are critical to safe and efficient operation of smart buildings. A significant amount of building data can be collected and analyzed to detect building component failures. Attacks against such data that are contaminated with small additive disturbances (i.e., adversarial perturbation attacks) could dreadfully impact the performance of such systems while maintaining a high level of imperceptibility. The vulnerability studies of such data attacks is lacking. Specifically, most existing detection and classification models have flat structures, regarded as single-stage classifiers (SSCs), are prone to adversarial data perturbation attacks. In this article, we present a coarse-to-fine hierarchical fault detection and multilevel diagnosis (HFDD) model, and formulate a mathematical program to derive targeted attacks on the model with respect to a prespecified target diagnosis level. Two algorithms are developed based on convex relaxations of the formulated program for nontargeted attacks. An alternating direction method of multipliers-based solver is developed for the convex programs. Extensive experiments are conducted using two real-world datasets of measurements from air handling units and chillers, demonstrating the feasibility of the proposed attacks with regard to misclassification rate and imperceptibility of the attack. We also show that the HFDD is more robust to disturbances than SSC-based fault detection and multilevel diagnosis systems.