Detect First, Explain Later: Training-Free Temporal-Memory Digital Twin Anomaly Detection with Post-Hoc LLM Interpretation for ICS

arXiv:2609.29704 · cs.CR · Submitted 2026-08-31 · Read on arXiv

cs.CR

Submitted: 2026-08-31

Updated: 2026-08-31

Terminology

Digital Twin — 15× in this paper · explained in 5 episodes
Aggregation — 14× in this paper · explained in 1 episode
Interpretability — 12× in this paper · explained in 15 episodes
Robustness — 7× in this paper · explained in 5 episodes
Ablation — 6× in this paper · explained in 1 episode
Calibration — 6× in this paper · explained in 7 episodes
Consistency — 6× in this paper · explained in 3 episodes
Explainability — 6× in this paper · explained in 3 episodes
Industrial Control Systems — 6× in this paper
Alignment — 5× in this paper · explained in 1 episode
Accuracy — 4× in this paper · explained in 1 episode
Benchmark — 3× in this paper · explained in 2 episodes
Domain Shift — 3× in this paper · explained in 4 episodes
Feature Selection — 3× in this paper · explained in 4 episodes
Generalization — 3× in this paper · explained in 13 episodes
Grounding — 3× in this paper · explained in 3 episodes
Hysteresis — 3× in this paper · explained in 3 episodes
Transferability — 3× in this paper · explained in 4 episodes
Abstraction — 2× in this paper · explained in 1 episode
Benchmarking — 2× in this paper · explained in 4 episodes
F1 Score — 2× in this paper · explained in 3 episodes
Isolation Forest — 2× in this paper
LLM Integration — 2× in this paper · explained in 2 episodes
Temporal Reasoning — 2× in this paper · explained in 2 episodes
Verification — 2× in this paper · explained in 2 episodes
Ablation study — 1× in this paper · explained in 1 episode
Adaptation — 1× in this paper · explained in 1 episode
Computational overhead — 1× in this paper · explained in 2 episodes
Core — 1× in this paper · explained in 2 episodes
Distribution Shift — 1× in this paper · explained in 6 episodes
Feature Engineering — 1× in this paper · explained in 3 episodes
Fidelity — 1× in this paper · explained in 2 episodes
Fine-Tuning — 1× in this paper · explained in 5 episodes
Hallucination — 1× in this paper · explained in 4 episodes
Large Language Models (LLMs) — 1× in this paper · explained in 6 episodes
Machine Learning — 1× in this paper
Reconstruction Error — 1× in this paper · explained in 2 episodes
Temporal Correlations — 1× in this paper · explained in 2 episodes

Sources

Systematic Integration of Digital Twins and Constrained LLMs for Interpretable Cyber-Physical Anomaly Detection

Terminology

Sources

Related papers