System and method for determination of anomalies in a cyber-physical system

A system for determination of anomalies in a cyber-physical system (CPS), the system comprising:

• a memory and a hardware processor configured to:
• generate one or more diagnostic rules configured to calculate at least one auxiliary CPS variable representing synthetic data derived from a group of primary CPS variables;
• calculate, via a computer-implemented method of calculating one or more values of the at least one auxiliary CPS variable, the synthetic data comprising the one or more values of the at least one auxiliary CPS variable for a predefined output interval of time based on collected values of the group of primary CPS variables sampled from telemetry data of the CPS for a predefined input interval of time based on the one or more generated diagnostic rules;
• and
• determine, via a computer-implemented method of determination of anomalies, an anomaly in the CPS based on the collected values of the group of primary CPS variables and the synthetic data.

A non-transitory computer readable medium storing thereon computer executable instructions for determination of anomalies in a cyber-physical system (CPS), including instructions for:

• generating one or more diagnostic rules configured to calculate at least one auxiliary CPS variable representing synthetic data derived from a group of primary CPS variables;
• calculating, via a computer-implemented method of calculating one or more values of the at least one auxiliary CPS variable, the synthetic data comprising the one or more values of the at least one auxiliary CPS variable for a predefined output interval of time based on collected values of the group of primary CPS variables sampled from telemetry data of the CPS for a predefined input interval of time based on the one or more generated diagnostic rules;
• and
• determining, via a computer-implemented method of determination of anomalies, an anomaly in the CPS based on the collected values of the group of primary CPS variables and the synthetic data.