Localizing Anomalies in Critical Infrastructure using Model-Based Drift Explanations
Valerie Vaquet, Fabian Hinder, Jonas Vaquet, Kathrin Lammers, Lars Quakernack, Barbara Hammer
TL;DR
This work models critical infrastructure as graphs and treats anomalies as concept drift within a dynamic Bayesian network, distinguishing Type I global demand anomalies (e.g., leaks) from Type II sensor faults. By introducing a time latent variable and applying model-based drift explanations, the authors enable anomaly detection and localization without requiring precise topology or leakage-free historical data, and they validate the approach on water distribution networks and electrical grids. The key findings show that drift effects decay exponentially with graph distance, and tree-based explanation methods can effectively localize anomalies, offering a topology-agnostic, computationally lightweight alternative to hydraulic models with practical applicability to real-world critical infrastructure. Overall, the methodology advances explainable AI for infrastructure monitoring by linking drift detection to localized explanations, enabling robust anomaly localization under data scarcity and changing demands.
Abstract
Facing climate change, the already limited availability of drinking water will decrease in the future rendering drinking water an increasingly scarce resource. Considerable amounts of it are lost through leakages in water transportation and distribution networks. Thus, anomaly detection and localization, in particular for leakages, are crucial but challenging tasks due to the complex interactions and changing demands in water distribution networks. In this work, we analyze the effects of anomalies on the dynamics of critical infrastructure systems by modeling the networks employing Bayesian networks. We then discuss how the problem is connected to and can be considered through the lens of concept drift. In particular, we argue that model-based explanations of concept drift are a promising tool for localizing anomalies given limited information about the network. The methodology is experimentally evaluated using realistic benchmark scenarios. To showcase that our methodology applies to critical infrastructure more generally, in addition to considering leakages and sensor faults in water systems, we showcase the suitability of the derived technique to localize sensor faults in power systems.
