{"id":"https://openalex.org/W7163158969","doi":"https://doi.org/10.48550/arxiv.2606.01691","title":"IstGPT: LLM-based Anomaly Detection for Spatial-Temporal Graph in Industrial Systems","display_name":"IstGPT: LLM-based Anomaly Detection for Spatial-Temporal Graph in Industrial Systems","publication_year":2026,"publication_date":"2026-06-01","ids":{"openalex":"https://openalex.org/W7163158969","doi":"https://doi.org/10.48550/arxiv.2606.01691"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.01691","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.01691","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.01691","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5137618862","display_name":"Yuchen Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Yuchen","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137682555","display_name":"Ning Xi","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xi, Ning","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137623053","display_name":"Pengbin Feng","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Feng, Pengbin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137678795","display_name":"Shigang Liu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Shigang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137695556","display_name":"Jianfeng Ma","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ma, Jianfeng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137638025","display_name":"Yulong Shen","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Shen, Yulong","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137689870","display_name":"Yanan Sun","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Sun, Yanan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5137632820","display_name":"Xiaolin Zhou","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhou, Xiaolin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.7965999841690063,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.7965999841690063,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.13660000264644623,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.012799999676644802,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.6937000155448914},{"id":"https://openalex.org/keywords/industrial-control-system","display_name":"Industrial control system","score":0.5958999991416931},{"id":"https://openalex.org/keywords/dependency","display_name":"Dependency (UML)","score":0.5192999839782715},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.4731000065803528},{"id":"https://openalex.org/keywords/enhanced-data-rates-for-gsm-evolution","display_name":"Enhanced Data Rates for GSM Evolution","score":0.3747999966144562},{"id":"https://openalex.org/keywords/dependency-graph","display_name":"Dependency graph","score":0.3734000027179718},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.3409000039100647},{"id":"https://openalex.org/keywords/architecture","display_name":"Architecture","score":0.33570000529289246}],"concepts":[{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.6937000155448914},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6726999878883362},{"id":"https://openalex.org/C40071531","wikidata":"https://www.wikidata.org/wiki/Q2513962","display_name":"Industrial control system","level":3,"score":0.5958999991416931},{"id":"https://openalex.org/C19768560","wikidata":"https://www.wikidata.org/wiki/Q320727","display_name":"Dependency (UML)","level":2,"score":0.5192999839782715},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.4731000065803528},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.46650001406669617},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3935999870300293},{"id":"https://openalex.org/C162307627","wikidata":"https://www.wikidata.org/wiki/Q204833","display_name":"Enhanced Data Rates for GSM Evolution","level":2,"score":0.3747999966144562},{"id":"https://openalex.org/C16311509","wikidata":"https://www.wikidata.org/wiki/Q4148050","display_name":"Dependency graph","level":3,"score":0.3734000027179718},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.3619999885559082},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.3409000039100647},{"id":"https://openalex.org/C123657996","wikidata":"https://www.wikidata.org/wiki/Q12271","display_name":"Architecture","level":2,"score":0.33570000529289246},{"id":"https://openalex.org/C62611344","wikidata":"https://www.wikidata.org/wiki/Q1062658","display_name":"Node (physics)","level":2,"score":0.3343999981880188},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.32910001277923584},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.31839999556541443},{"id":"https://openalex.org/C17500928","wikidata":"https://www.wikidata.org/wiki/Q959968","display_name":"Control system","level":2,"score":0.31630000472068787},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.3131999969482422},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.30970001220703125},{"id":"https://openalex.org/C98025372","wikidata":"https://www.wikidata.org/wiki/Q477538","display_name":"Systems architecture","level":3,"score":0.296999990940094},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.2784000039100647},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.2759999930858612},{"id":"https://openalex.org/C146380142","wikidata":"https://www.wikidata.org/wiki/Q1137726","display_name":"Directed graph","level":2,"score":0.27559998631477356},{"id":"https://openalex.org/C2776126113","wikidata":"https://www.wikidata.org/wiki/Q1128980","display_name":"Industrial robot","level":3,"score":0.2531999945640564},{"id":"https://openalex.org/C558772884","wikidata":"https://www.wikidata.org/wiki/Q1508564","display_name":"Graph rewriting","level":3,"score":0.251800000667572}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.01691","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.01691","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.01691","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.01691","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","score":0.5431206822395325,"id":"https://metadata.un.org/sdg/9"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Industrial":[0],"Internet":[1],"systems":[2],"face":[3],"increasing":[4],"threats":[5],"from":[6],"sophisticated":[7],"industrial":[8,45,76,82,179],"control":[9],"system":[10,91],"(ICS)":[11],"attacks,":[12],"resulting":[13],"in":[14,24,75,177],"critical":[15],"safety":[16],"incidents.":[17],"However,":[18],"existing":[19],"tools":[20],"exhibit":[21],"limited":[22],"effectiveness":[23],"real-time":[25,57],"anomaly":[26,46],"detection":[27,47],"due":[28],"to":[29,55,93,128],"the":[30,43,106,157,172],"complex":[31],"dependencies":[32,74],"among":[33],"sensors":[34],"and":[35,52,69,90,114,149,160],"actuators.":[36],"To":[37],"tackle":[38],"this,":[39],"we":[40],"present":[41],"IstGPT,":[42],"first":[44,80],"tool":[48],"based":[49,108],"on":[50,72,109,141],"LLMs":[51],"graph":[53,107,121],"learning":[54],"provide":[56],"protection":[58],"against":[59,137],"a":[60,150],"wide":[61],"range":[62],"of":[63,174],"ICS":[64],"attacks.":[65],"IstGPT":[66,118,136,155,176],"achieves":[67,156],"fine-grained":[68],"precise":[70],"modeling":[71],"spatial-temporal":[73],"cyber-physical":[77],"systems.":[78],"It":[79],"leverages":[81],"multi-modal":[83],"knowledge,":[84],"including":[85,144],"operational":[86],"data,":[87],"technical":[88],"documents,":[89],"diagrams,":[92],"extract":[94],"sensor-actuator":[95],"dependency":[96],"graphs":[97],"via":[98,131],"multi-stage":[99],"prompt":[100],"engineering.":[101],"Then,":[102],"LLM-Optimation":[103],"iteratively":[104],"refines":[105],"node":[110],"accuracy,":[111],"edge":[112],"consistency,":[113],"logical":[115],"coherence.":[116],"Finally,":[117],"integrated":[119],"improved":[120],"neural":[122],"networks":[123],"with":[124],"an":[125],"encoder-decoder":[126],"architecture":[127],"detect":[129],"anomalies":[130],"reconstruction":[132],"errors.":[133],"We":[134,169],"evaluate":[135],"12":[138],"state-of-the-art":[139],"baselines":[140],"9":[142],"datasets,":[143],"2":[145],"public,":[146],"6":[147],"simulated,":[148],"real-world":[151,178],"robotic":[152],"arm":[153],"dataset.":[154],"best":[158],"F1-scores":[159],"eTaF1":[161],"(a":[162],"newer":[163],"time-aware":[164],"metric)":[165],"across":[166],"nine":[167],"datasets.":[168],"further":[170],"discuss":[171],"feasibility":[173],"deploying":[175],"scenarios.":[180]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-06-03T00:00:00"}