Abstract:Anomaly detection in multivariate time series has been widely studied in one-class classification (OCC) setting. The training samples in this setting are assumed to be normal. In more practical situations, it is difficult to guarantee that all samples are normal. Meanwhile, preparing a completely clean training dataset is costly and laborious. Such a case may degrade the performance of OCC-based anomaly detection methods which fit the training distribution as the normal distribution. To overcome this limitation, in this paper, we propose MTGFlow, an unsupervised anomaly detection approach for Multivariate Time series anomaly detection via dynamic Graph and entity-aware normalizing Flow. MTGFlow first estimates the density of the entire training samples and then identifies anomalous instances based on the density of the test samples within the fitted distribution. This relies on a widely accepted assumption that anomalous instances exhibit more sparse densities than normal ones, with no reliance on the clean training dataset. However, it is intractable to directly estimate the density due to the complex dependencies among entities and their diverse inherent characteristics, not to mention detecting anomalies based on the estimated distribution. In order to address these problems, we utilize the graph structure learning model to learn interdependent and evolving relations among entities, which effectively captures the complex and accurate distribution patterns of multivariate time series. In addition, our approach incorporates the unique characteristics of individual entities by employing an entity-aware normalizing flow. This enables us to represent each entity as a parameterized normal distribution. Furthermore, considering that some entities present similar characteristics, we propose a cluster strategy that capitalizes on the commonalities of entities with similar characteristics, resulting in more precise and detailed density estimation. We refer to this cluster-aware extension as MTGFlow_cluster. Extensive experiments are conducted on six widely used benchmark datasets, in which MTGFlow and MTGFlow_cluster demonstrate their superior detection performance.

SGFM: Conditional Flow Matching for Time Series Anomaly Detection With State Space Models

Graph-Augmented Normalizing Flows for Anomaly Detection of Multiple Time Series

MSDG: Multi-Scale Dynamic Graph Neural Network for Industrial Time Series Anomaly Detection

Dynamic Deep Graph Convolution with Enhanced Transformer Networks for Time Series Anomaly Detection in IoT

Detecting Multivariate Time Series Anomalies with Zero Known Label

Learnable Flow Model Conditioned on Graph Representation Memory for Anomaly Detection

IoT-GAN: Anomaly Detection for Time Series in IoT Based on Generative Adversarial Networks

Fine-Grained Multivariate Time Series Anomaly Detection in IoT

Multivariate Time-Series Anomaly Detection in IoT Using Attention-Based Gated Recurrent Unit

InfoFlow: A Transformer-based Time Series Anomaly Detection Model with Information Bottleneck and Normalizing Flows

Deep Anomaly Detection for Time-Series Data in Industrial IoT: A Communication-Efficient On-Device Federated Learning Approach

Label-Free Multivariate Time Series Anomaly Detection

Graph Spatiotemporal Process for Multivariate Time Series Anomaly Detection with Missing Values

Flow Graph Anomaly Detection Based on Unsupervised Learning

Deep probabilistic graphical modeling for robust multivariate time series anomaly detection with missing data

A Novel Graph Structure Learning Based Semi-Supervised Framework for Anomaly Identification in Fluctuating IoT Environment

Normalizing flows for novelty detection in industrial time series data

Graph Transformer Network Incorporating Sparse Representation for Multivariate Time Series Anomaly Detection

Learning Graph Structures with Transformer for Multivariate Time Series Anomaly Detection in IoT