Multivariate Time Series Anomaly Detection with Deep Learning Models Leveraging Inter-Variable Relationships

被引:0
作者
Seong, Changmin [1 ]
Lim, Dongjun [2 ]
Jang, Jiho [2 ]
Lee, Jonghoon [3 ]
Park, Jong-Geun [3 ]
Cheong, Yun-Gyung [4 ]
机构
[1] Sungkyunkwan Univ, Dept Comp Sci, Suwon, South Korea
[2] Sungkyunkwan Univ, Dept Artificial Intelligence, Suwon, South Korea
[3] Elect & Telecommun Res Inst, Daejeon, South Korea
[4] Sungkyunkwan Univ, Dept AI Social Innovat Convergence Program, Suwon, South Korea
来源
2023 SILICON VALLEY CYBERSECURITY CONFERENCE, SVCC | 2023年
关键词
time-series anomaly detection; GRU; AutoEncoder; latent variable; similarity;
D O I
10.1109/SVCC56964.2023.10165468
中图分类号
TP18 [人工智能理论];
学科分类号
081104 ; 0812 ; 0835 ; 1405 ;
摘要
This paper presents a system for multivariate time series anomaly detection using deep learning, with an added module to reflect variable relationships. The system uses an autoencoder to extract latent variables that reflect the time series characteristics of the variables, and calculates variable importance using the similarities among the variables. To evaluate the proposed method, experiments were conducted using three similarity measures: cosine similarity, distance correlation, and DTW. Four time series datasets were used for evaluation, and the results showed that the proposed model outperformed the baseline model in HAI 22.04 and HAI 21.03 datasets. For the WADI dataset, the F1-score improved only when using cosine similarity, while the TaPR-F1 score improved only when using DTW. However, no performance improvement was observed in the SWaT dataset. These results suggest that the effectiveness of utilizing intervariable relationships is dependent on the characteristics of the data and the similarity calculation method employed. Therefore, a careful selection of the appropriate similarity calculation method for a given dataset is necessary to achieve optimal performance improvements.
引用
收藏
页数:8
相关论文
共 24 条
[1]   Practical Approach to Asynchronous Multivariate Time Series Anomaly Detection and Localization [J].
Abdulaal, Ahmed ;
Liu, Zhuanghua ;
Lancewicki, Tomer .
KDD '21: PROCEEDINGS OF THE 27TH ACM SIGKDD CONFERENCE ON KNOWLEDGE DISCOVERY & DATA MINING, 2021, :2485-2494
[2]  
Ahmed ChuadhryMujeeb., 2017, P 3 INT WORKSH CYB P, P25, DOI [10.1145/3055366.3055375, DOI 10.1145/3055366.3055375]
[3]   Multi-head CNN-RNN for multi-time series anomaly detection: An industrial case study [J].
Canizo, Mikel ;
Triguero, Isaac ;
Conde, Angel ;
Onieva, Enrique .
NEUROCOMPUTING, 2019, 363 :246-260
[4]  
Chalapathy R, 2019, Arxiv, DOI arXiv:1901.03407
[5]   Anomaly Detection for IoT Time-Series Data: A Survey [J].
Cook, Andrew A. ;
Misirli, Goksel ;
Fan, Zhong .
IEEE INTERNET OF THINGS JOURNAL, 2020, 7 (07) :6481-6494
[6]  
Deng AL, 2021, AAAI CONF ARTIF INTE, V35, P4027
[7]  
HM, 2015, International Journal of Data Mining & Knowledge Management Process, V5, P01, DOI [10.5121/ijdkp.2015.5201, DOI 10.5121/IJDKP.2015.5201, 10.5121/ijdkp.2015.5201]
[8]   Time-Series Aware Precision and Recall for Anomaly Detection Considering Variety of Detection Result and Addressing Ambiguous Labeling [J].
Hwang, Won-Seok ;
Yun, Jeong-Han ;
Kim, Jonguk ;
Kim, Hyoung Chun .
PROCEEDINGS OF THE 28TH ACM INTERNATIONAL CONFERENCE ON INFORMATION & KNOWLEDGE MANAGEMENT (CIKM '19), 2019, :2241-2244
[9]  
Hyeok-Ki Shin J.-H. Y., 2022, HAI 2204
[10]   Multivariate time series anomaly detection: A framework of Hidden Markov Models [J].
Li, Jinbo ;
Pedrycz, Witold ;
Jamal, Iqbal .
APPLIED SOFT COMPUTING, 2017, 60 :229-240