Abstract:Anomaly detection in multi-type event sequences is a crucial and challenging problem with important applications in various domains, including cybersecurity, finance and healthcare. Temporal point process has emerged as a powerful technique for modeling event sequences and has gained considerable attention in the field of anomaly detection. However, existing temporal point process approaches are either inapplicable to multi-type event sequence data or incur the loss of valuable information in subsequences associated with specific event types. To this end, we propose a novel Multiple Hypothesis Testing based Anomaly Detection method (MultiAD) to detect anomalous multi-type event sequences. The basic idea of MultiAD is to capture the underlying distribution of normal sequences using a neural multivariate point process, based on which the original hypothesis testing problem can be converted into a multiple hypothesis testing using the multivariate time rescaling theorem. By conducting multiple hypothesis tests on the time-rescaled subsequences, MultiAD makes full use of the valuable information contained within individual subsequences. Moreover, we claim that the existing test statistic ignores the sequential information of inter-event time intervals and propose new statistics to address this shortcoming. Finally, we employ the kernel method to obtain a smooth estimator of the distribution of the proposed statistics under the null hypothesis. This ensures a more accurate and reliable computation of the p-value, providing robust statistical inference. Extensive experimental results demonstrate that MultiAD significantly outperforms the state-of-the-art methods on both synthetic and real-world data.

Multi-perspective Anomaly Detection in Business Process Execution Events

Detecting Data-Model-Oriented Anomalies In Parallel Business Process

Challenges of Anomaly Detection in the Object-Centric Setting: Dimensions and the Role of Domain Knowledge

Detecting Anomalous Events in Object-centric Business Processes via Graph Neural Networks

A Data Model Oriented Anomalies Detection Method for Business Process Model with Parallel Structure

COMB: Interconnected Transformers-Based Autoencoder for Multi-Perspective Business Process Anomaly Detection

GRASPED: A GRU-AE Network Based Multi-Perspective Business Process Anomaly Detection Model

A Multi-perspective Approach To Anomaly Detection For Self-aware Embodied Agents

Kernel Based Sequential Data Anomaly Detection in Business Process Event Logs

Multi-perspective process mining for emergency process

Intrinsic Anomaly Detection for Multi-Variate Time Series

Multiple Hypothesis Testing for Anomaly Detection in Multi-type Event Sequences

Towards Meaningful Anomaly Detection: The Effect of Counterfactual Explanations on the Investigation of Anomalies in Multivariate Time Series

Online Model-based Anomaly Detection in Multivariate Time Series: Taxonomy, Survey, Research Challenges and Future Directions

Applied Machine Learning to Anomaly Detection in Enterprise Purchase Processes

Discovering Multi-perspective Process Models: The Case of Loosely-Structured Processes

Multi-channel anomaly detection using graphical models

Extracting Multiple Viewpoint Models from Relational Databases

From Explanation to Action: An End-to-End Human-in-the-loop Framework for Anomaly Reasoning and Management

Representing Timed Automata and Timing Anomalies of Cyber-Physical Production Systems in Knowledge Graphs

Data-driven anomaly monitoring methods for multimode processes:overview and perspectives