Anomaly detection in time series based on interval sets

被引:27
作者
Ren, Huorong [1 ]
Liu, Mingming [1 ]
Liao, Xiujuan [1 ]
Liang, Li [1 ]
Ye, Zhixing [1 ]
Li, Zhiwu [1 ,2 ]
机构
[1] Xidian Univ, Sch Electromech Engn, Xian 710071, Peoples R China
[2] Macau Univ Sci & Technol, Inst Syst Engn, Taipa 999078, Macau, Peoples R China
关键词
anomaly detection; time series; similarity measurement; interval set;
D O I
10.1002/tee.22626
中图分类号
TM [电工技术]; TN [电子技术、通信技术];
学科分类号
0808 ; 0809 ;
摘要
Anomaly detection in time series is a popular topic focusing on a variety of applications, which achieves a wealth of results. However, there are many cases of missing anomalies and false alarms for most existing works. Inspired by the concept of interval sets, this paper proposes an anomaly detection algorithm called probability interval and tries to detect the anomaly data in time series from a new perspective. In the proposed algorithm, a time series is divided into several subsequences. Each subsequence is regarded as an interval set depending on its value space and boundary of the subsequence. The similarity measurements between interval sets adopt interval operations and point probability distributions of the interval bounds. In addition, based on similarity results, the anomaly score is defined. The experimental results on artificial and real datasets indicate that the proposed algorithm has better discriminative performance than the piecewise aggregate approximation method and greatly reduces the false alarm rate. (c) 2018 Institute of Electrical Engineers of Japan. Published by John Wiley & Sons, Inc.
引用
收藏
页码:757 / 762
页数:6
相关论文
共 19 条
[1]  
[Anonymous], 2002, P 8 ACM SIGKDD INT C, DOI [10.1145/775047.775128, DOI 10.1145/775047.775128]
[2]  
Babenko VF, 2011, UKR MATH J+, V63, P177
[3]   Modern approaches to processing large hyperspectral and multispectral aerospace data flows [J].
Bondur, V. G. .
IZVESTIYA ATMOSPHERIC AND OCEANIC PHYSICS, 2014, 50 (09) :840-852
[4]   Combining sketches and wavelet analysis for multi time-scale network anomaly detection [J].
Callegari, C. ;
Giordano, S. ;
Pagano, M. ;
Pepe, T. .
COMPUTERS & SECURITY, 2011, 30 (08) :692-704
[5]   WebECG: A novel ECG simulator based on MATLAB Web Figure [J].
Guney, Esra ;
Eksi, Ziya ;
Cakiroglu, Murat .
ADVANCES IN ENGINEERING SOFTWARE, 2012, 45 (01) :167-174
[6]   The North American Animal Disease Spread Model:: A simulation model to assist decision making in evaluating animal disease incursions [J].
Harvey, Neil ;
Reeves, Aaron ;
Schoenbaum, Mark A. ;
Zagmutt-Vergara, Francisco J. ;
Dub, Caroline ;
Hill, Ashley E. ;
Corso, Barbara A. ;
McNab, W. Bruce ;
Cartwright, Claudia I. ;
Salman, Mo D. .
PREVENTIVE VETERINARY MEDICINE, 2007, 82 (3-4) :176-197
[7]  
Izakian H, 2013, PROCEEDINGS OF THE 2013 JOINT IFSA WORLD CONGRESS AND NAFIPS ANNUAL MEETING (IFSA/NAFIPS), P1513, DOI 10.1109/IFSA-NAFIPS.2013.6608627
[8]   HOT SAX: Efficiently finding the most unusual time series subsequence [J].
Keogh, E ;
Lin, J ;
Fu, AD .
Fifth IEEE International Conference on Data Mining, Proceedings, 2005, :226-233
[9]  
Keogh E. J., 2000, Proceedings. KDD-2000. Sixth ACM SIGKDD International Conference on Knowledge Discovery and Data Mining, P285, DOI 10.1145/347090.347153
[10]   A novel hybrid intrusion detection method integrating anomaly detection with misuse detection [J].
Kim, Gisung ;
Lee, Seungmin ;
Kim, Sehun .
EXPERT SYSTEMS WITH APPLICATIONS, 2014, 41 (04) :1690-1700