Abstract:Anomaly detection significantly enhances the robustness of cloud systems.While neural network-based methods have recently demonstrated strongadvantages, they encounter practical challenges in cloud environments: thecontradiction between the impracticality of maintaining a unique model for eachservice and the limited ability to deal with diverse normal patterns by aunified model, as well as issues with handling heavy traffic in real time andshort-term anomaly detection sensitivity. Thus, we propose MACE, a multi-normal-pattern accommodated and efficientanomaly detection method in the frequency domain for time series anomalydetection. There are three novel characteristics of it: (i) a patternextraction mechanism excelling at handling diverse normal patterns with aunified model, which enables the model to identify anomalies by examining thecorrelation between the data sample and its service normal pattern, instead ofsolely focusing on the data sample itself; (ii) a dualistic convolutionmechanism that amplifies short-term anomalies in the time domain and hindersthe reconstruction of anomalies in the frequency domain, which enlarges thereconstruction error disparity between anomaly and normality and facilitatesanomaly detection; (iii) leveraging the sparsity and parallelism of frequencydomain to enhance model efficiency. We theoretically and experimentally provethat using a strategically selected subset of Fourier bases can not only reducecomputational overhead but is also profitable to distinguish anomalies,compared to using the complete spectrum. Moreover, extensive experimentsdemonstrate MACE's effectiveness in handling diverse normal patterns with aunified model and it achieves state-of-the-art performance with highefficiency.

Macro-network Traffic Anomaly Detection Strategy Based on Sequential Pattern Mining

Packet Payload Based Anomalous Network Intrusion Detection

Network traffic monitoring based on mining frequent patterns

Mining Frequent Patterns from Network Flows for Monitoring Network

Network Traffic Anomaly Detection Method Based on Multi scale Residual Feature

Traffic System Anomaly Detection Using Spatiotemporal Pattern Networks

MSCA: an Unsupervised Anomaly Detection System for Network Security in Backbone Network.

Survey of Research on Anomaly Detection of Wavelet Analysis Based on Network Traffic

Research on the detection of abnormal traffic for multi-channel network

Anomaly Detection Based on Traffic Information Structure

Online Network traffic anomaly detection method combining OS-ELM and SADE

Multidimensional Data Mining of Traffic Anomalies on Large-Scale Road Networks

Network Traffic Anomaly Detection Based on Adaptive Filter Theory

Learning Multi-Pattern Normalities in the Frequency Domain for Efficient Time Series Anomaly Detection

Analysis Method of Multi-Source Flow Characteristics and Its Application in Anomaly Detection

Research on Network Security Filtering Model and Key Algorithms Based on Network Abnormal Traffic Analysis

Research on Network Traffic Anomaly Detection Algorithm

An Effective Method for Computer Network Anomaly Detection

Network Anomaly Detection Based On Multi-Scale Dynamic Characteristics Of Traffic

MTC-NET: A Multi-Channel Independent Anomaly Detection Method for Network Traffic

Unsupervised Anomaly Detection for Intermittent Sequences Based on Multi-Granularity Abnormal Pattern Mining