Abstract:Anomaly detection is a longstanding and active research area that has many applications in domains such as finance, security, and manufacturing. However, the efficiency and performance of anomaly detection algorithms are challenged by the large-scale, high-dimensional, and heterogeneous data that are prevalent in the era of big data. Isolation-based unsupervised anomaly detection is a novel and effective approach for identifying anomalies in data. It relies on the idea that anomalies are few and different from normal instances, and thus can be easily isolated by random partitioning. Isolation-based methods have several advantages over existing methods, such as low computational complexity, low memory usage, high scalability, robustness to noise and irrelevant features, and no need for prior knowledge or heavy parameter tuning. In this survey, we review the state-of-the-art isolation-based anomaly detection methods, including their data partitioning strategies, anomaly score functions, and algorithmic details. We also discuss some extensions and applications of isolation-based methods in different scenarios, such as detecting anomalies in streaming data, time series, trajectory, and image datasets. Finally, we identify some open challenges and future directions for isolation-based anomaly detection research.

Research on Anomaly Detection of System Call Sequences of Process Based on Rough Set Reduction

A Markov Model of System Calls Sequence and Its Application in Anomaly Detection

Anomaly detection based on grammar

Anomaly Detection Based on System Call Classification

Abnormal Detection of Processes Based on Improved Rough Set Value Reduction Algorithm

A Rough Set Theory Based Method for Anomaly Intrusion Detection in Computer Network Systems

Anomaly Detection Algorithm Based on Electric Equipment

Anomaly Detection with Partially Observed Anomalies

Anomaly Rule Detection in Sequence Data

A Low-Cost Method to Intrusion Detection System Using Sequences of System Calls

Research of Anomaly detection based on Dynamic Anomaly Detection Enhancement Framework

Anomaly Detection of User Behavior Based on DTMC with States of Variable-Length Sequences

An Anomaly Detection Method Based on Learning of "Scores Sequence".

An efficient anomaly detection method for uncertain data based on minimal rare patterns with the consideration of anti-monotonic constraints

Algorithmic Recourse for Anomaly Detection in Multivariate Time Series

Novel Method for Anomaly Detection of User Behavior Based on Shell Commands and DTMC Models

Anomalous Event Sequence Detection

Understanding Time Series Anomaly State Detection through One-Class Classification

Statistical Evaluation of Anomaly Detectors for Sequences

Anomaly Detection Based on Isolation Mechanisms: A Survey

A Sequential Monte Carlo Approach To Anomaly Detection In Tracking Visual Events