Cited by 8Anomaly Detection Techniques and ApplicationsFault Detection and Control SystemsMachine Fault Diagnosis Techniques

Time-Series Multi-Instance Learning for Weakly Supervised Industrial Fault Detection

Liu, Chen, He, Shibo, Li, Shizhong, Shi, Zhenyu, Meng, Wenchao·2025·IEEE Transactions on Industrial Informatics

Abstract

Time-series anomaly detection plays a crucial role in industrial fault detection. Most existing studies follow either an unsupervised setting, which is prone to false alarms, or a supervised setting, which is time-consuming and labor-intensive. To address these limitations, we adopt an innovative weakly supervised paradigm for industrial fault detection, where segment-level labels are provided during training, while point-level predictions are made during inference. Within this paradigm, we propose an innovative$C$-ary tree-based multi-instance learning (MIL) framework. First, the entire time series is represented as a$C$-ary tree, where nodes representing subsequences of different lengths are treated as instances in the MIL framework. This design allows for the detection of both point and collective anomalies. Second, to detect out-of-distribution (OOD) anomalies that are not visible during training, we develop a vector quantization module to memorize regular historical patterns. OOD anomalies are then detected when they show significant discrepancies from all memorized patterns. Finally, we enhance the MIL framework with an attention-based pooling mechanism that allocates greater focus on anomalous instances, further improving detection performance. To validate the effectiveness of our method, we conduct experiments on four real-world industrial time-series datasets. The results show that our method outperforms existing approaches by at least 6.01% in AUROC under weak supervision.

Integrity signals

Registry

Crossref · 10.1109/tii.2024.3523591

Cites

31 of 31 references verified0 citation errors · 0 not checkable

Statistics

Recomputing p-values needs the paper’s full text.

Claims the paper makes

This paper’s full text isn’t openly available, so its claims and self-check weren’t run. The registry and citation checks still apply.

Claims other papers make about this one

Each is checked against this paper’s own text: does it say what the citing paper says it does?

  • Other sensor-correlation-based models make correlations explicit through graph structures, digital twins, energy-based physics features, or multi-instance representations.

    “while others make correlations explicit through graph structures, digital twins, energy-based physics features, or multi-instance representations [94,96,99,101,104,106,107].”
  • Correlation-based methods are particularly suitable for attacks and faults that selectively perturb a subset of variables while keeping other measurements within nominal ranges, and for scenarios where the key symptom is a collapse or distortion of inter-sensor correlation rather than a large deviation of a single signal.

    “This makes them particularly suitable for attacks and faults that selectively perturb a subset of variables while keeping other measurements within nominal ranges, as well as for scenarios where the key symptom is a collapse or distortion of inter-sensor correlation rather than a large deviation of a single signal [94,96,99-101,106-108].”
  • By focusing on joint behavior across multiple sensors and control channels, correlation-based detectors can better separate cyber-physical attacks (which often produce inconsistent or coordinated manipulation patterns) from natural faults (which follow typical failure correlations or fault signatures).

    “By focusing on joint behavior across multiple sensors and control channels, correlation-based detectors can better separate cyber-physical attacks, which often produce inconsistent or coordinated manipulation patterns, from natural faults that follow typical failure correlations or fault signatures [91,95,96,100,101].”
  • The strong reliance on learned correlation profiles implies that significant operating-mode changes, reconfigurations, or sensor upgrades can cause correlation shifts that resemble attacks, requiring adaptive learning, mode-aware modeling, and careful thresholding to avoid false alarms.

    “At the same time, the strong reliance on learned correlation profiles implies that significant operating-mode changes, reconfigurations, or sensor upgrades can cause correlation shifts that resemble attacks, requiring adaptive learning, mode-aware modeling, and careful thresholding to avoid false alarms [91,96,98].”
  • Ensemble and weakly supervised frameworks show that combining multiple correlation views (statistical, temporal, structural) can improve robustness under label scarcity and mixed cyber/physical disturbance conditions.

    “Ensemble and weakly supervised frameworks further show that combining multiple correlation views (statistical, temporal, structural) can improve robustness under label scarcity and mixed cyber/physical disturbance conditions [95,96].”

Cites

Flagged first, then by citations

1 of the 32 references couldn’t be matched to a known paper.

Cited by

Sorted by citations

Authors
Liu, C., He, S., Li, S., Shi, Z., & Meng, W.
Affiliations
State Key Laboratory of Industrial Control Technology (CN)
Venue
IEEE Transactions on Industrial Informatics
Published
2025-04
Volume
21
Issue
4
Pages
3326-3335
ISSN
  • 1551-3203 (ISSN-L)
  • 1941-0050
OpenAlex
W4406856657
Cited by
8
References
32
Citations by year
2026: 5 · 2025: 3
FWCI
3.24
Type
journal article
Language
en
Open access
closed
Locations
IEEE Transactions on Industrial Informatics (publishedVersion)
Funders
National Natural Science Foundation of China (U23A20326, 62088101)
Topics
  • Physical Sciences › Computer Science › Artificial Intelligence › Anomaly Detection Techniques and Applications
  • Physical Sciences › Engineering › Control and Systems Engineering › Fault Detection and Control Systems
  • Physical Sciences › Engineering › Control and Systems Engineering › Machine Fault Diagnosis Techniques
Keywords
time series anomaly detection, industrial fault detection, weakly supervised learning, multiple instance learning, vector quantization, attention-based pooling

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review