Abstract:Detection of anomalies in streaming time series data has become an important research topic due to the wide range of possible applications, including the detection of extreme weather conditions, malicious attacks on protected facilities, monitoring unauthorised gas and oil leaks, illegal pipeline connections, power cable faults, and water and other environmental pollution. Rapid detection of abnormal conditions and identifying these critical events is essential to protect lives and assets. Therefore, developing appropriate systems and detection methods is an urgent task. Anomaly detection in streaming data is challenging due to its large volume and high speed, presence of noise, and non-stationarity of the signal (or ‘concept drift’). The latter significantly complicates the identification of differences between new ‘typical’ behaviour and abnormal events. Solving this problem requires the algorithm for processing such data to learn and adapt to changing conditions. The paper proposes a modification of the algorithm for detecting anomalies in time series. This algorithm provides early detection of abnormal series in a massive collection of non-stationary streaming time series data. Anomalies are observations that are highly improbable given the previous time series values. The proposed approach is based on the primary detection of the predictive limit for the typical system behaviour using the theory of extreme values, followed by checking for the abnormality of the following series using the sliding window technique. The time series parameters are used as input data and compared by density distribution to detect any significant changes in the distribution of the characteristics. It allows the decision-making model to automatically adapt to the changing environment according to detected changes. Since anomalies are, by definition, exceptions to the typical behaviour of a system, most of the available stored data should reflect that typical behaviour of the system in question. It is unnecessary to have representative samples of all possible types of the standard behaviour of a given system for the algorithm to work well. The basic idea is to have a warm-up data set to obtain initial values for the decision model parameters. It makes it possible to determine if there is any significant difference between the last typical behaviour and the new typical behaviour. The proposed algorithm demonstrates its performance under conditions of noisy non-stationary data in several time series classes. Keywords: concept drift, extreme value theory, multivariate time series, outlier detection.

Detecting Anomaly in Data Streams by Fractal Model

Fractal Based Anomaly Detection over Data Streams.

Fractal-Based Algorithms for Burst Detection over Data Streams

An Algorithm for Data Stream Speed Anomaly Detection Based on RCSW

A Novel Approach for Anomaly Detection in Data Streams: Fuzzy-statistical Detection Mode.

Anomaly Detection for Time Series Data Stream

Supervised Anomaly Detection in Uncertain Pseudo-Periodic Data Streams

Anomaly Detection of Streaming Data Based on Deep Learning

Anomaly Detection Algorithm Based on Fractal Characteristics of Large-Scale Network Traffic

ADAPTATION OF THE ALGORITHM FOR DETECTING ANOMALIES IN TIME SERIES FOR NON-STATIONARY STREAMING DATA

Outlier Detection Algorithms and their Availability to Data Streams Mining

Anomaly Detection over Concept Drifting Data Streams

Fast Anomaly Detection in Multiple Multi-Dimensional Data Streams

Anomaly Intrusion Detection Based on Data Stream

Online Reactive Anomaly Detection over Stream Data

Dynamic Micro-cluster-Based Streaming Data Clustering Method for Anomaly Detection.

EADetection: an Efficient and Accurate Sequential Behavior Anomaly Detection Approach over Data Streams

Time Series Anomaly Detection Based on Data Stream Clustering

Review of Anomaly Detection Algorithms for Data Streams

Anomaly Detection at Scale: The Case for Deep Distributional Time Series Models

An Anomaly Detection Framework for Time Series Data: an Interval-Based Approach