Abstract:Multivariate time series anomaly detection (MTSAD) plays a crucial role in the Internet of things (IoT), identifying device malfunction or system attacks. Graph neural networks (GNNs) are widely applied in MTSAD to capture the spatial features among sensors. However, GNN requires an explicit graph structure and cannot work when spatial relationships are lacking or sensor dependencies are unknown. Hence, graph structure learning (GSL) emerges as a promising solution, which learns graph structures with the downstream tasks without requiring spatial relationships. However, a general cascade effect occurs in the industrial scene. Moreover, an attack event changes sensor data sequentially instead of simultaneously due to the multiple serial process that occur (i.e., delay correlation). Existing GSL-based anomaly detection methods fail to tackle delay correlation and focus on low prediction errors. However, the low prediction error distribution is always dispersed, making it difficult to differentiate between normal and abnormal samples based on a threshold. Therefore, we propose a multivariate time series anomaly detection based on multiple spatio-temporal graph convolution (MSTGAD). MSTGAD utilizes dynamic time warping distance as prior knowledge instead of Euclidean, guiding graph learning to capture delay correlations effectively. MSTGAD designs an ensemble predictor, which utilizes two sub-predictors with a shared and learnable graph to ensure high prediction accuracy while maintaining stable anomaly scores. Furthermore, we conduct extensive experiments to evaluate the MSTGAD method’s effectiveness. Our method outperforms existing GSL-based methods in anomaly detection on four publicly available real-world datasets, demonstrating our proposed approach’s effectiveness. Compared with the best GSL-based method, MSTGAD achieves an additional 0.83% improvement on average.

IMG: Deep Representation Graph Learning for Anomaly Detection in Industrial Control System

Monitoring industrial control systems via spatio-temporal graph neural networks

Multivariate time series anomaly detection via dynamic graph attention network and Informer

GNN-based Advanced Feature Integration for ICS Anomaly Detection

Graph Neural Networks for Anomaly Detection in Industrial Internet of Things

A Graph Embedded In Graph Framework With Dual-sequence Input For Efficient Anomaly Detection of Complex Equipment Under Insufficient Samples

SLSG: Industrial Image Anomaly Detection with Improved Feature Embeddings and One-Class Classification

SLSG: Industrial Image Anomaly Detection by Learning Better Feature Embeddings and One-Class Classification

Anomaly Detection Model for Large-scale Industrial Systems Using Transfer Entropy and Graph Attention Network

Deep Industrial Image Anomaly Detection: A Survey

A Multi-View Framework for BGP Anomaly Detection Via Graph Attention Network

Graph Attention Network and Informer for Multivariate Time Series Anomaly Detection

Physics-informed gated recurrent graph attention unit network for anomaly detection in industrial cyber-physical systems

Multisensor Anomaly Detection and Interpretable Analysis for Linear Induction Motors

A Standardized ICS Network Data Processing Flow with Generative Model in Anomaly Detection

GRU-Based Interpretable Multivariate Time Series Anomaly Detection in Industrial Control System

Full Graph Autoencoder for One-Class Group Anomaly Detection of IIoT System

Flow Graph Anomaly Detection Based on Unsupervised Learning

Multivariate Time Series Anomaly Detection Based on Multiple Spatio-Temporal Graph Convolution

Multivariate Time Series Anomaly Detection Based on Multiple Spatiotemporal Graph Convolution

SGFM: Conditional Flow Matching for Time Series Anomaly Detection With State Space Models