{"id":"https://openalex.org/W7123791088","doi":"https://doi.org/10.1142/s0218001426590019","title":"Temporal-Local Attribution with Domain Knowledge for Explainable Anomaly Detection in Power Industrial Control Networks","display_name":"Temporal-Local Attribution with Domain Knowledge for Explainable Anomaly Detection in Power Industrial Control Networks","publication_year":2026,"publication_date":"2026-01-14","ids":{"openalex":"https://openalex.org/W7123791088","doi":"https://doi.org/10.1142/s0218001426590019"},"language":"en","primary_location":{"id":"doi:10.1142/s0218001426590019","is_oa":false,"landing_page_url":"https://doi.org/10.1142/s0218001426590019","pdf_url":null,"source":{"id":"https://openalex.org/S41486457","display_name":"International Journal of Pattern Recognition and Artificial Intelligence","issn_l":"0218-0014","issn":["0218-0014","1793-6381"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319815","host_organization_name":"World Scientific","host_organization_lineage":["https://openalex.org/P4310319815"],"host_organization_lineage_names":["World Scientific"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Pattern Recognition and Artificial Intelligence","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5122915171","display_name":"Zhiqi Li","orcid":null},"institutions":[{"id":"https://openalex.org/I17442442","display_name":"State Grid Corporation of China (China)","ror":"https://ror.org/05twwhs70","country_code":"CN","type":"company","lineage":["https://openalex.org/I17442442"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhiqi Li","raw_affiliation_strings":["State Grid Siji Network Security Technology (Beijing) Co., Ltd., Beijing 102211, P.\u00a0R.\u00a0China"],"raw_orcid":"https://orcid.org/0009-0006-5589-5886","affiliations":[{"raw_affiliation_string":"State Grid Siji Network Security Technology (Beijing) Co., Ltd., Beijing 102211, P.\u00a0R.\u00a0China","institution_ids":["https://openalex.org/I17442442"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5122940867","display_name":"Lei Sun","orcid":null},"institutions":[{"id":"https://openalex.org/I17442442","display_name":"State Grid Corporation of China (China)","ror":"https://ror.org/05twwhs70","country_code":"CN","type":"company","lineage":["https://openalex.org/I17442442"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lei Sun","raw_affiliation_strings":["State Grid Siji Network Security Technology (Beijing) Co., Ltd., Beijing 102211, P.\u00a0R.\u00a0China"],"raw_orcid":"https://orcid.org/0009-0001-4898-1472","affiliations":[{"raw_affiliation_string":"State Grid Siji Network Security Technology (Beijing) Co., Ltd., Beijing 102211, P.\u00a0R.\u00a0China","institution_ids":["https://openalex.org/I17442442"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5122914670","display_name":"Jing Ma","orcid":null},"institutions":[{"id":"https://openalex.org/I17442442","display_name":"State Grid Corporation of China (China)","ror":"https://ror.org/05twwhs70","country_code":"CN","type":"company","lineage":["https://openalex.org/I17442442"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jing Ma","raw_affiliation_strings":["State Grid Siji Network Security Technology (Beijing) Co., Ltd., Beijing 102211, P.\u00a0R.\u00a0China"],"raw_orcid":"https://orcid.org/0009-0001-4722-0962","affiliations":[{"raw_affiliation_string":"State Grid Siji Network Security Technology (Beijing) Co., Ltd., Beijing 102211, P.\u00a0R.\u00a0China","institution_ids":["https://openalex.org/I17442442"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5122920998","display_name":"Yu Huo","orcid":null},"institutions":[{"id":"https://openalex.org/I17442442","display_name":"State Grid Corporation of China (China)","ror":"https://ror.org/05twwhs70","country_code":"CN","type":"company","lineage":["https://openalex.org/I17442442"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yu Huo","raw_affiliation_strings":["State Grid Siji Network Security Technology (Beijing) Co., Ltd., Beijing 102211, P.\u00a0R.\u00a0China"],"raw_orcid":"https://orcid.org/0009-0001-7219-6239","affiliations":[{"raw_affiliation_string":"State Grid Siji Network Security Technology (Beijing) Co., Ltd., Beijing 102211, P.\u00a0R.\u00a0China","institution_ids":["https://openalex.org/I17442442"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5122944790","display_name":"Yang Xu","orcid":null},"institutions":[{"id":"https://openalex.org/I17442442","display_name":"State Grid Corporation of China (China)","ror":"https://ror.org/05twwhs70","country_code":"CN","type":"company","lineage":["https://openalex.org/I17442442"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yang Xu","raw_affiliation_strings":["State Grid Siji Network Security Technology (Beijing) Co., Ltd., Beijing 102211, P.\u00a0R.\u00a0China"],"raw_orcid":"https://orcid.org/0000-0003-0128-6234","affiliations":[{"raw_affiliation_string":"State Grid Siji Network Security Technology (Beijing) Co., Ltd., Beijing 102211, P.\u00a0R.\u00a0China","institution_ids":["https://openalex.org/I17442442"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I17442442"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.05178561,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"40","issue":"06","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.6909999847412109,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.6909999847412109,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.2540999948978424,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13429","display_name":"Electricity Theft Detection Techniques","score":0.0044999998062849045,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/interpretability","display_name":"Interpretability","score":0.9230999946594238},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.673799991607666},{"id":"https://openalex.org/keywords/domain-knowledge","display_name":"Domain knowledge","score":0.4422999918460846},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.36899998784065247},{"id":"https://openalex.org/keywords/reliability","display_name":"Reliability (semiconductor)","score":0.35100001096725464},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.3303999900817871},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.32899999618530273},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.3285999894142151}],"concepts":[{"id":"https://openalex.org/C2781067378","wikidata":"https://www.wikidata.org/wiki/Q17027399","display_name":"Interpretability","level":2,"score":0.9230999946594238},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7182999849319458},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.673799991607666},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5684000253677368},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5680000185966492},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5054000020027161},{"id":"https://openalex.org/C207685749","wikidata":"https://www.wikidata.org/wiki/Q2088941","display_name":"Domain knowledge","level":2,"score":0.4422999918460846},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.36899998784065247},{"id":"https://openalex.org/C43214815","wikidata":"https://www.wikidata.org/wiki/Q7310987","display_name":"Reliability (semiconductor)","level":3,"score":0.35100001096725464},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.3303999900817871},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.32899999618530273},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.3285999894142151},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.3068000078201294},{"id":"https://openalex.org/C152745839","wikidata":"https://www.wikidata.org/wiki/Q5438153","display_name":"Fault detection and isolation","level":3,"score":0.3066999912261963},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.30309998989105225},{"id":"https://openalex.org/C101468663","wikidata":"https://www.wikidata.org/wiki/Q1620158","display_name":"Modular design","level":2,"score":0.29829999804496765},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.28529998660087585},{"id":"https://openalex.org/C199163554","wikidata":"https://www.wikidata.org/wiki/Q1681619","display_name":"Univariate","level":3,"score":0.2827000021934509},{"id":"https://openalex.org/C40071531","wikidata":"https://www.wikidata.org/wiki/Q2513962","display_name":"Industrial control system","level":3,"score":0.2793999910354614},{"id":"https://openalex.org/C2776135515","wikidata":"https://www.wikidata.org/wiki/Q17143721","display_name":"Regularization (linguistics)","level":2,"score":0.26350000500679016},{"id":"https://openalex.org/C105002631","wikidata":"https://www.wikidata.org/wiki/Q4833645","display_name":"Subject-matter expert","level":3,"score":0.259799987077713},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.2572999894618988},{"id":"https://openalex.org/C120567893","wikidata":"https://www.wikidata.org/wiki/Q1582085","display_name":"Knowledge extraction","level":2,"score":0.25619998574256897},{"id":"https://openalex.org/C143299363","wikidata":"https://www.wikidata.org/wiki/Q900584","display_name":"Attribution","level":2,"score":0.25360000133514404}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1142/s0218001426590019","is_oa":false,"landing_page_url":"https://doi.org/10.1142/s0218001426590019","pdf_url":null,"source":{"id":"https://openalex.org/S41486457","display_name":"International Journal of Pattern Recognition and Artificial Intelligence","issn_l":"0218-0014","issn":["0218-0014","1793-6381"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319815","host_organization_name":"World Scientific","host_organization_lineage":["https://openalex.org/P4310319815"],"host_organization_lineage_names":["World Scientific"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Pattern Recognition and Artificial Intelligence","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure","score":0.6587110757827759}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":19,"referenced_works":["https://openalex.org/W2127979711","https://openalex.org/W2296719434","https://openalex.org/W2799758613","https://openalex.org/W3207886734","https://openalex.org/W3214806500","https://openalex.org/W4282984446","https://openalex.org/W4285239820","https://openalex.org/W4297099474","https://openalex.org/W4310731961","https://openalex.org/W4312628478","https://openalex.org/W4382203010","https://openalex.org/W4397026497","https://openalex.org/W4398133976","https://openalex.org/W4400489891","https://openalex.org/W4401880329","https://openalex.org/W4402202846","https://openalex.org/W4402829053","https://openalex.org/W4407113914","https://openalex.org/W4409426358"],"related_works":[],"abstract_inverted_index":{"Anomaly":[0],"detection":[1,64],"in":[2,38,71,232],"power":[3,19,72,233],"industrial":[4,39],"control":[5],"system":[6],"(ICS)":[7],"networks":[8],"is":[9,195],"critical":[10,98],"for":[11,62,210],"ensuring":[12],"the":[13,22,94,140,193,217],"safety":[14],"and":[15,59,101,119,135,145,173,184,222,228],"reliability":[16],"of":[17,25,97,142,182],"modern":[18],"infrastructures.":[20],"However,":[21],"widespread":[23],"use":[24],"deep":[26],"learning":[27],"models":[28,65],"has":[29],"introduced":[30],"significant":[31],"interpretability":[32,165,179],"challenges,":[33],"limiting":[34],"their":[35],"practical":[36],"adoption":[37],"scenarios.":[40],"In":[41,191],"this":[42],"paper,":[43],"we":[44,131],"propose":[45],"a":[46,88],"novel":[47],"temporal-local":[48],"attribution":[49,90,109,187],"framework":[50,112,194,215],"that":[51,92,160],"integrates":[52],"domain":[53,121],"knowledge":[54,122,137],"to":[55,86,123,138,146,167],"provide":[56],"fine-grained,":[57],"dynamic,":[58],"actionable":[60],"explanations":[61,125],"anomaly":[63,105,230],"operating":[66],"on":[67,104,155],"multivariate":[68],"time-series":[69],"data":[70],"ICS":[73,157,234],"networks.":[74],"Specifically,":[75],"our":[76,111,161],"method":[77],"combines":[78],"sliding-window":[79],"temporal":[80],"sampling":[81],"with":[82,126,150,204],"local":[83],"perturbation":[84],"analysis":[85],"construct":[87],"two-dimensional":[89],"matrix":[91],"reveals":[93],"joint":[95],"impact":[96],"time":[99],"points":[100],"key":[102],"features":[103],"decisions.":[106],"Unlike":[107],"conventional":[108],"approaches,":[110],"explicitly":[113],"captures":[114],"temporally":[115],"localized":[116],"precursor":[117,143],"patterns":[118],"incorporates":[120],"align":[124,147],"real-world":[127,223],"process":[128],"logic.":[129,152],"Furthermore,":[130],"incorporate":[132],"attention-based":[133],"mechanisms":[134],"expert":[136,178],"enhance":[139],"identification":[141],"signals":[144],"explanation":[148],"outputs":[149],"operational":[151],"Experimental":[153],"results":[154],"public":[156],"datasets":[158],"demonstrate":[159],"approach":[162],"delivers":[163],"superior":[164],"compared":[166,203],"traditional":[168],"methods":[169],"such":[170],"as":[171],"LIME":[172],"SHAP,":[174],"achieving":[175],"an":[176],"average":[177],"score":[180],"improvement":[181],"35%":[183],"reducing":[185],"false":[186],"rates":[188],"by":[189],"28%.":[190],"addition,":[192],"computationally":[196],"efficient,":[197],"introducing":[198],"less":[199],"than":[200],"10%":[201],"overhead":[202],"baseline":[205],"detectors,":[206],"making":[207],"it":[208],"suitable":[209],"real-time":[211],"deployment.":[212],"The":[213],"proposed":[214],"bridges":[216],"gap":[218],"between":[219],"model":[220],"performance":[221],"usability,":[224],"enabling":[225],"transparent,":[226],"trustworthy,":[227],"effective":[229],"management":[231],"environments.":[235]},"counts_by_year":[],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2026-01-14T00:00:00"}