REVIEW 3 major objections 5 minor 1 cited by
Secure Data Reconstruction: A Direct Data-Driven Approach
T0 review · 3 major / 5 minor · reviewed 2026-08-09 · deepseek-v4-flash
Pith's one-line read By proving that brute-force search and its convex $\ell_1$ relaxation recover the true trajectory under explicit rank and norm conditions on the offline Hankel matrix, this paper makes secure data reconstruction possible for unknown…
desk verdict The brute-force exact-recovery results are solid, but the l1-relaxation guarantees are vacuous unless the Hankel matrix has full column rank—a restriction the paper never states. read the letter →
The pith
A machine-rendered reading of the paper's core claim, the machinery that carries it, and where it could break.
The reading
What carries the argument
The key object is the block-Hankel matrix $H_L(w_d)$ of an offline attack-free trajectory, together with its minimum critical row set $S^*(H_L(w_d))$ or the channel-structured variant. The behavioral lemma says that when $\operatorname{rank} H_L(w_d) = m(B)L + n(B)$, the image of this matrix is exactly the set of length-$L$ system trajectories, so a candidate reconstruction is legal exactly when it lies in that image. The critical-row-set size then measures how much row deletion the matrix tolerates before losing rank, which is precisely the redundancy needed to overwrite $k$ attacked entries or $k$ attacked channels. The $\ell_1$ problem (22) replaces the combinatorial search by minimizing $\|w - H g\|_1$; Theorem 3 certifies exactness through the inequality $\|H_B v\|_1 > \|H_F v\|_1$ for all nonzero $v$, and Theorem 4 converts this into a checkable contraction condition on the matrix $T$ with $H_F = T H_B$.
What would settle it
Fix any offline trajectory satisfying the generalized persistency of excitation condition but with a minimum critical row set of size at most $2k$, construct the entry attack from Proposition 1 by tampering exactly with a critical set, and run Algorithm 1: if it outputs a trajectory different from the true one, the claimed tightness is confirmed and the theorem's condition is shown necessary in that instance. For the $\ell_1$ claim, find any Hankel matrix and attack set with $\operatorname{rank} H_B = \operatorname{rank} H$ and $\|T\|_1 \ge 1$ where the minimizer of (22) differs from the true trajectory; that would refute the sufficiency of Condition 3 alone.
Extended reading notes
Core claim
The central claim is that secure trajectory reconstruction for an unknown LTI system can be reduced to a rank-persistence property of the Hankel matrix built from offline data. With the generalized persistency of excitation condition, any length-$L$ trajectory is exactly the image of this Hankel matrix; then, if the minimum critical row set of the Hankel matrix has size at least $2k+1$, deleting any $2k$ rows leaves the column space unchanged, so the brute-force algorithm's solution necessarily equals the true trajectory (Theorem 1). The same reasoning with channel-structured critical row sets gives the channel-attack guarantee (Theorem 2). For computation, recovery via (22), an $\ell_1$ minimization over the coefficient vector $g$, is exact provided the benign rows dominate the malicious rows in $\ell_1$ norm for every nonzero direction (Theorem 3), or provided the rank condition $\operatorname{rank} H_B = \operatorname{rank} H$ and the contraction $\|T\|_1 < 1$ hold (Theorem 4).
Load-bearing premise
The load-bearing premise is that the offline Hankel matrix is rich enough that removing any $2k$ rows or channel blocks never reduces its rank, plus, for the $\ell_1$ relaxation, that the attack rows are dominated by healthy rows ($\|T\|_1 < 1$); the paper notes the first condition is computationally difficult to verify and the second depends on the unknown attack set.
Editorial extensions
If this is right
- If Condition 1 holds, Algorithm 1 never returns a wrong trajectory: any returned candidate equals the true one, so a practitioner can trust a positive reconstruction without knowing the attack set.
- Together with Lemma 2, the entry-attack guarantee implies the fundamental limit $k \le p(B)/2$; systems with too few outputs cannot be secured against this attacker model regardless of offline data length.
- The convex problems (22) and (33) inherit exactness in the regimes of Theorems 3 and 4, so secure reconstruction can run in polynomial time instead of enumerating $\binom{qL}{k}$ or $\binom{q}{k}$ subproblems.
- The noisy-data extension turns the same machinery into a two-stage procedure of convex fit, residual ranking, and least-squares refinement, so the guarantees extend approximately to measurement noise, as demonstrated on mass-spring-damper and quadruple-tank examples.
Reading between the lines
- The paper leaves implicit that Condition 1 is the data-driven counterpart of $2k$-sparse observability in model-based secure state estimation, suggesting that the same redundancy lower bounds transfer to model-free settings.
- Because the verification in Remark 4 gives a polynomial-time certificate for the $\ell_1$-dominance condition once an attack set is hypothesized, one could turn (22) into a testable detector by sweeping candidate attack sets and keeping those that pass; the paper does not develop this.
- The analysis assumes the offline data $w_d$ is attack-free and rich enough; a natural extension not treated here is to robustify against a compromised offline set by combining multiple trajectories or applying the critical-row test to an augmented Hankel matrix.
Editorial analysis
A structured set of objections, weighed in public.
Referee Report
Summary. The manuscript considers an unknown discrete-time LTI system in the behavioral framework and addresses reconstruction of an L-length trajectory from corrupted measurements, given an attack-free offline trajectory wd satisfying the generalized persistency of excitation condition. Two attack scenarios are studied: up to k arbitrary entries and up to k compromised channels. The authors formulate recovery as combinatorial optimization, propose brute-force algorithms, and prove exact recovery under critical-row-set conditions (Theorems 1 and 2, Propositions 1 and 2). They then replace the cardinality constraints by l1 and group-LASSO relaxations, claiming exact recovery under condition (24) or Condition 3 with ||T||_1 < 1 (Theorems 3 and 4). A heuristic noisy-data extension and numerical examples on mass-spring-damper and quadruple-tank systems are provided.
Significance. The behavioral, model-free formulation is novel and relevant as a safeguard for data-driven control. The paper's main positive features are that the brute-force recovery theorems are mathematically sound and non-circular, relying directly on [17, Corollary 21]; the tightness constructions in Propositions 1 and 2 are meaningful; code is released; and the numerical comparison with a model-based method illustrates the advantage of not needing model knowledge. However, the convex-relaxation guarantees, which are the advertised computationally efficient contribution, have a serious gap in the overdetermined-data regime. The paper needs a substantive revision before the exact-recovery guarantees for (22) can be accepted as stated.
major comments (3)
- [Section V-A, Theorem 3, Eq. (24)] Under the standing generalized persistency condition (1), rank H = mL+n. In the common data-rich case T-L+1 > mL+n, H has a nonzero null vector v, and for that v both H_B v and H_F v vanish, so (24) reads 0 > 0 and cannot hold. Thus the hypothesis of Theorem 3 is unsatisfiable exactly in the overdetermined regime where multiple offline trajectories are available, and the proof of (28) gives equality rather than strict inequality for such v. The theorem needs either an explicit full-column-rank assumption, or a modified condition restricted to v not in Null H together with an argument that trajectory recovery still holds despite non-unique g.
- [Section V-A, Theorem 4, proof after Eq. (32)] The displayed chain ||H_F v||_1 = ||T H_B v||_1 <= ||T||_1 ||H_B v||_1 < ||H_B v||_1 for v != 0 is invalid when v is in the null space of H, because it would require 0 < 0. The conclusion of Theorem 4 may be salvageable by decomposing v into null and non-null components, but as written the proof does not establish the theorem. Since Theorem 4 is presented as the main tractable verification route, this gap is load-bearing.
- [Section V-A, Condition 3; Section VI] Condition 3 is defined through the unknown attack set C via H_B = H|_{[qL]\C}. The statement in Section VI that Condition 3 'can be easily verified offline since H_L(wd) is provided' conflates offline knowledge of wd with offline knowledge of C. In a security setting, C is adversarial and is not available for verification; the paper should either state explicitly that Condition 3 is an unverifiable sufficient condition or provide verifiable proxy conditions. The same limitation applies to condition (24) in Theorem 3, which also depends on C.
minor comments (5)
- [Section VI, Fig. 4 caption and text] The phrase 'given in in Fig. 4' contains a duplicated 'in'.
- [Section VI-A, comparison paragraph] The citation [Mao2022] does not match any numbered reference in the bibliography; it should be replaced with the corresponding entry (likely [6]) or listed properly.
- [Section VI, numerical example parameters] The example uses T=11, L=3, m=1, n=6, so N=9=mL+n; this is precisely the full-column-rank case and therefore avoids the nullspace obstruction discussed above. The paper should acknowledge this and also demonstrate a data-rich example with N > mL+n.
- [Section III-C, proof of Proposition 1] In the proof of Proposition 1, the line 'H |_{C(i)} = H |_C' is confusing because C(i) was defined as a set of indices inside I(i), not as a set of rows of H; the notation should be clarified.
- [Section V-A, group-LASSO problem (33)] Problem (33) is introduced but no theorem is proved for it; the footnote claiming that 'all results remain valid' needs to be made precise for the group-LASSO formulation.
Circularity Check
No significant circularity: the recovery theorems are proven from stated rank conditions via an externally established fundamental lemma; cited self-work is supporting, not definitional.
full rationale
The paper's derivation chain is self-contained with respect to its assumptions. Lemma 1 imports [17, Corollary 21], a prior peer-reviewed theorem whose stated assumptions (generalized persistency of excitation) do not include the recovery result; this is independent evidence, not an ansatz smuggled in by citation. Theorems 1 and 2 prove sufficiency of Conditions 1 and 2 directly from rank and nullspace arguments, not by assuming the conclusion. The convex recovery guarantees (Theorems 3 and 4) are derived from explicit inequalities (24) and Condition 3 with ||T||_1 < 1; these are sufficient conditions on the offline Hankel matrix and the unknown attack set, not fitted parameters or renamed outputs. The numerical experiments test the algorithms on simulated data and do not fit constants to force success. There is an important correctness caveat: when H has a nontrivial null vector, condition (24) cannot hold and Theorem 4's condition cannot be satisfied, so the l1 guarantees may be vacuous in overdetermined data regimes; however, that is a validity and scope issue rather than circularity. Self-citations to [13] and [17] are load-bearing only as standard lemmas whose proofs are independent of this paper's target claims.
Assumptions & free parameters
free parameters (1)
- k (upper bound on number of attacked entries or channels)
assumptions (5)
- domain assumption Offline trajectory w_d is attack-free and satisfies the generalized persistency of excitation condition rank H_L(w_d) = m(B)L + n(B) (Lemma 1, [17, Corollary 21]).
- domain assumption The system is discrete-time linear time-invariant, and the trajectory segment length L satisfies L >= ell(B), the system lag.
- ad hoc to paper Condition 1 or Condition 2 on the minimum critical row set of the Hankel matrix holds.
- ad hoc to paper Condition 3 (rank H_B = rank H) and ||T||_1 < 1 hold for the l1 relaxation.
- domain assumption The set of compromised channels is constant over time in the channel-attacked scenario.
Cite this review
Pith. "Pith review of Secure Data Reconstruction: A Direct Data-Driven Approach." pith.science (2026). https://pith.science/paper/TNCV2L4C
@misc{pith2026250200436,
author = {Pith},
title = {Pith review of: Secure Data Reconstruction: A Direct Data-Driven Approach},
year = {2026},
howpublished = {\url{https://pith.science/paper/TNCV2L4C}},
note = {Machine review of arXiv:2502.00436}
}
abstract
This paper addresses the problem of secure data reconstruction for unknown systems, where data collected from the system are susceptible to malicious manipulation. We aim to recover the real trajectory without prior knowledge of the system model. To achieve this, a behavioral language is used to represent the system, describing it using input/output trajectories instead of state-space models. We consider two attack scenarios. In the first scenario, up to $k$ entries of the collected data are malicious. On the other hand, the second scenario assumes that at most $k$ channels from sensors or actuators can be compromised, implying that any data collected from these channels might be falsified. For both scenarios, we formulate the trajectory recovery problem as an optimization problem and introduce sufficient conditions to ensure successful recovery of the true data. Since finding exact solutions to these problems can be computationally inefficient, we further approximate them using an $\ell_1$-norm and group Least Absolute Shrinkage and Selection Operator (LASSO). We demonstrate that under certain conditions, these approximation problems also find the true trajectory while maintaining low computation complexity. Finally, we extend the proposed algorithms to noisy data. By reconstructing the secure trajectory, this work serves as a safeguard mechanism for subsequent data-driven control methods.
Figures
Figures from the paper (3 more)
Forward citations
Cited by 1 Pith paper
-
Cyber Security of Sensor Systems for State Sequence Estimation: A Machine Learning Approach
A consistency-check shell added to anomaly detection filters attacked sensor data for sequence estimators, matching a genie that knows the attacked sensors in simulated vehicle scenarios.
Reference graph
Works this paper leans on
-
[32]
Data-driven identifica- tion of attack-free sensors in networked control systems,
S. C. Anand, M. S. Chong, and A. M. Teixeira, “Data-driven identifica- tion of attack-free sensors in networked control systems,” arXiv preprint arXiv:2312.04845, 2023
arXiv 2023
-
[1]
Secure control: Towards survivable cyber-physical systems,
A. A. Cardenas, S. Amin, and S. Sastry, “Secure control: Towards survivable cyber-physical systems,” in 2008 The 28th International Conference on Distributed Computing Systems Workshops. IEEE, 2008, pp. 495–500
work page 2008
-
[2]
Observer- based detection and identification of sensor attacks in networked cpss,
N. R. Chowdhury, J. Belikov, D. Baimel, and Y . Levron, “Observer- based detection and identification of sensor attacks in networked cpss,” Automatica, vol. 121, p. 109166, 2020
work page 2020
-
[3]
Networked control systems under cyber attacks with applications to power networks,
A. Teixeira, H. Sandberg, and K. H. Johansson, “Networked control systems under cyber attacks with applications to power networks,” in Proceedings of the 2010 American control conference . IEEE, 2010, pp. 3690–3696
work page 2010
-
[4]
False data injection on state estimation in power systems—attacks, impacts, and defense: A survey,
R. Deng, G. Xiao, R. Lu, H. Liang, and A. V . Vasilakos, “False data injection on state estimation in power systems—attacks, impacts, and defense: A survey,”IEEE Transactions on Industrial Informatics, vol. 13, no. 2, pp. 411–423, 2016
work page 2016
-
[5]
Secure state estimation against sensor attacks in the presence of noise,
S. Mishra, Y . Shoukry, N. Karamchandani, S. N. Diggavi, and P. Tabuada, “Secure state estimation against sensor attacks in the presence of noise,” IEEE Transactions on Control of Network Systems , vol. 4, no. 1, pp. 49–59, 2016
work page 2016
-
[6]
On the computational complexity of the secure state-reconstruction problem,
Y . Mao, A. Mitra, S. Sundaram, and P. Tabuada, “On the computational complexity of the secure state-reconstruction problem,” Automatica, vol. 136, p. 110083, 2022
work page 2022
-
[7]
Low complexity secure state estimation design for linear system with non-derogatory dynamics,
Z. Li and Y . Mo, “Low complexity secure state estimation design for linear system with non-derogatory dynamics,” in 2021 60th IEEE Conference on Decision and Control (CDC) . IEEE, 2021, pp. 6591– 6596
work page 2021
Show all 33 references
-
[8]
Attack-resilient H2, H∞, and ℓ1 state estimator,
Y . Nakahira and Y . Mo, “Attack-resilient H2, H∞, and ℓ1 state estimator,” IEEE Transactions on Automatic Control , vol. 63, no. 12, pp. 4353–4360, 2018
2018
-
[9]
Resilient multi-dimensional consensus in adversarial environment,
J. Yan, X. Li, Y . Mo, and C. Wen, “Resilient multi-dimensional consensus in adversarial environment,” Automatica, vol. 145, p. 110530, 2022
2022
-
[10]
Resilient asymptotic consensus in robust networks,
H. J. LeBlanc, H. Zhang, X. Koutsoukos, and S. Sundaram, “Resilient asymptotic consensus in robust networks,” IEEE Journal on Selected Areas in Communications , vol. 31, no. 4, pp. 766–781, 2013
2013
-
[11]
Direct data-driven control of constrained systems,
D. Piga, S. Formentin, and A. Bemporad, “Direct data-driven control of constrained systems,” IEEE Transactions on Control Systems Technol- ogy, vol. 26, no. 4, pp. 1422–1429, 2017
2017
-
[12]
On the role of regularization in direct data-driven lqr control,
F. D ¨orfler, P. Tesi, and C. De Persis, “On the role of regularization in direct data-driven lqr control,” in 2022 IEEE 61st Conference on Decision and Control (CDC) . IEEE, 2022, pp. 1091–1098
2022
-
[13]
Data-driven dynamic interpolation and approximation,
I. Markovsky and F. D ¨orfler, “Data-driven dynamic interpolation and approximation,” Automatica, vol. 135, p. 110008, 2022. 11
2022
-
[14]
Behavioral systems theory in data-driven analysis, signal pro- cessing, and control,
——, “Behavioral systems theory in data-driven analysis, signal pro- cessing, and control,” Annual Reviews in Control , vol. 52, pp. 42–64, 2021
2021
-
[15]
Data-driven control based on the behavioral approach: From theory to applications in power systems,
I. Markovsky, L. Huang, and F. D ¨orfler, “Data-driven control based on the behavioral approach: From theory to applications in power systems,” IEEE Control Systems Magazine , vol. 43, no. 5, pp. 28–68, 2023
2023
-
[16]
A note on persistency of excitation,
J. C. Willems, P. Rapisarda, I. Markovsky, and B. L. De Moor, “A note on persistency of excitation,” Systems & Control Letters , vol. 54, no. 4, pp. 325–329, 2005
2005
-
[17]
Identifiability in the behavioral setting,
I. Markovsky and F. D ¨orfler, “Identifiability in the behavioral setting,” IEEE Transactions on Automatic Control, vol. 68, no. 3, pp. 1667–1677, 2022
2022
-
[18]
On the persistency of excitation,
I. Markovsky, E. Prieto-Araujo, and F. D ¨orfler, “On the persistency of excitation,” Automatica, p. 110657, 2023
2023
-
[19]
A trajectory-based framework for data- driven system analysis and control,
J. Berberich and F. Allg ¨ower, “A trajectory-based framework for data- driven system analysis and control,” in 2020 European Control Confer- ence (ECC), 2020, pp. 1365–1370
2020
-
[20]
Data-driven internal model control of second-order discrete volterra systems,
J. G. Rueda-Escobedo and J. Schiffer, “Data-driven internal model control of second-order discrete volterra systems,” in 2020 59th IEEE Conference on Decision and Control (CDC) , 2020, pp. 4572–4579
2020
-
[21]
Data-based system analysis and control of flat nonlinear systems,
M. Alsalti, J. Berberich, V . G. Lopez, F. Allg ¨ower, and M. A. M ¨uller, “Data-based system analysis and control of flat nonlinear systems,” in 2021 60th IEEE Conference on Decision and Control (CDC) , 2021, pp. 1484–1489
2021
-
[22]
Fundamental lemma for data-driven analysis of linear parameter-varying systems,
C. Verhoek, R. T ´oth, S. Haesaert, and A. Koch, “Fundamental lemma for data-driven analysis of linear parameter-varying systems,” in 2021 60th IEEE Conference on Decision and Control (CDC), 2021, pp. 5040– 5046
2021
-
[23]
Data-driven simulation of generalized bilinear systems via linear time-invariant embedding,
I. Markovsky, “Data-driven simulation of generalized bilinear systems via linear time-invariant embedding,” vol. 68, pp. 1101–1106, 2023
2023
-
[24]
The behavioral approach to open and interconnected systems: Modeling by tearing, zooming, and linking,
J. C. Willems, “The behavioral approach to open and interconnected systems: Modeling by tearing, zooming, and linking,” Control Systems Magazine, vol. 27, pp. 46–99, 2007
2007
-
[25]
When is the secure state-reconstruction problem hard?
Y . Mao, A. Mitra, S. Sundaram, and P. Tabuada, “When is the secure state-reconstruction problem hard?” in 2019 IEEE 58th Conference on Decision and Control (CDC) . IEEE, 2019, pp. 5368–5373
2019
-
[26]
Secure state estimation for cyber-physical systems under sensor attacks: A satisfiability modulo theory approach,
Y . Shoukry, P. Nuzzo, A. Puggelli, A. L. Sangiovanni-Vincentelli, S. A. Seshia, and P. Tabuada, “Secure state estimation for cyber-physical systems under sensor attacks: A satisfiability modulo theory approach,” IEEE Transactions on Automatic Control , vol. 62, no. 10, pp. 49...
2017
-
[27]
Binary hypothesis testing with byzantine sensors: Fundamental tradeoff between security and efficiency,
X. Ren, J. Yan, and Y . Mo, “Binary hypothesis testing with byzantine sensors: Fundamental tradeoff between security and efficiency,” IEEE Transactions on Signal Processing, vol. 66, no. 6, pp. 1454–1468, 2018
2018
-
[28]
Secure estimation and control for cyber-physical systems under adversarial attacks,
H. Fawzi, P. Tabuada, and S. Diggavi, “Secure estimation and control for cyber-physical systems under adversarial attacks,” IEEE Transactions on Automatic control, vol. 59, no. 6, pp. 1454–1467, 2014
2014
-
[29]
Boyd and L
S. Boyd and L. Vandenberghe, Convex optimization . Cambridge university press, 2004
2004
-
[30]
The group lasso for logistic regression,
L. Meier, S. Van De Geer, and P. B¨uhlmann, “The group lasso for logistic regression,” Journal of the Royal Statistical Society Series B: Statistical Methodology, vol. 70, no. 1, pp. 53–71, 2008
2008
-
[31]
B ¨uhlmann and S
P. B ¨uhlmann and S. Van De Geer, Statistics for high-dimensional data: methods, theory and applications. Springer Science & Business Media, 2011
2011
-
[33]
Dimension reduction for efficient data-enabled predictive control,
K. Zhang, Y . Zheng, C. Shang, and Z. Li, “Dimension reduction for efficient data-enabled predictive control,” IEEE Control Systems Letters, 2023
2023
Reviewed August 9, 2026 · model on record in the stance chip above.
Discussion (0). Continue with ORCID to comment.