Anomalous Event Sequence Detection

Boxiang Dong,Zhengzhang Chen,Lu-An Tang,Haifeng Chen,Hui Wang,Kai Zhang,Ying Lin,Zhichun Li
DOI: https://doi.org/10.1109/mis.2020.3041174
IF: 6.744
2021-05-01
IEEE Intelligent Systems
Abstract:Anomaly detection has been widely applied in modern data-driven security applications to detect abnormal events/entities that deviate from the majority. However, less work has been done in terms of detecting suspicious event sequences/paths, which are better discriminators than single events/entities for distinguishing normal and abnormal behaviors in complex systems such as cyber-physical systems. A key and challenging step in this endeavor is how to discover those abnormal event sequences from millions of system event records in an efficient and accurate way. To address this issue, we propose NINA, a network diffusion based algorithm for identifying anomalous event sequences. Experimental results on both static and streaming data show that NINA is efficient (processes about 2 million records per minute) and accurate.
computer science, artificial intelligence,engineering, electrical & electronic
What problem does this paper attempt to address?