Abstract:Anomaly detection of multivariate time series is critical in many applications. However, traditional statistical and machine learning models have limitations in modeling complex temporal dependencies and inter-sensor correlations. To address these limitations, graph neural networks (GNNs) have emerged as a powerful paradigm and have shown promising progress in anomaly detection. However, most existing GNN-based methods simplify sensor associations as fully connected graphs, contradicting real-world sparse connectivity. Moreover, while capturing intersensor dependencies, GNNs often overlook critical temporal dependencies in time series. To address these challenges, we propose an unsupervised long- and short-term sparse graph attention (LSGA) neural network. Specifically, we first use convolutional neural networks (CNNs) and skip-gate recurrent units (skip-GRUs) to extract local dependencies and long-term trends. Skip-GRU with time-skip connections effectively extends the span of information flow compared to traditional GRU. Due to the unknown graph structure between different sensors, we utilize node embedding to calculate the similarity between sensors and subsequently generate a dense similarity matrix. Then, we use the Gumbel-softmax sampling method to transform the similarity matrix into a sparse graph structure. To effectively fuse information from different sensors, we introduce a graph attention network (GAT), which can learn the relationships between sensors and dynamically fuse information based on the similarity of node embedding vectors. By means of sparse representation, we selectively focus on the information fusion of the sensors that have the greatest impact on themselves, thereby filtering out connections with low similarity between nodes and effectively removing redundant association information. Finally, we demonstrate with extensive experiments that our proposed method outperforms several state-of-the-art baseline methods in achieving better results on all four real datasets, improving average F1 by 0.97%, 7.7%, 1.92%, and 1.8%.

One-class graph neural networks for anomaly detection in attributed networks

Anomaly Detection using One-Class Neural Networks

Distributed Online One-Class Support Vector Machine for Anomaly Detection over Networks

A Universal Adaptive Algorithm for Graph Anomaly Detection

Counterfactual Graph Learning for Anomaly Detection on Attributed Networks

A Deep One-Class Neural Network for Anomalous Event Detection in Complex Scenes.

OCGEC: One-class Graph Embedding Classification for DNN Backdoor Detection

Masked Graph Neural Networks for Unsupervised Anomaly Detection in Multivariate Time Series

Guarding Graph Neural Networks for Unsupervised Graph Anomaly Detection

Grouped Graph Neural Networks for Anomaly Detection in Time Series

Adversarial Graph Neural Network for Multivariate Time Series Anomaly Detection

A Graph Attention Network-Based Model for Anomaly Detection in Multivariate Time Series

One-Class Directed Heterogeneous Graph Neural Network for Intrusion Detection

An Unsupervised Long- and Short-term Sparse Graph Neural Network for Multi-sensor Anomaly Detection

Incorporating Network Structure with Node Information for Semi-supervised Anomaly Detection on Attributed Graphs.

Multivariate Time-Series Anomaly Detection via Graph Attention Network

DAGAD: Data Augmentation for Graph Anomaly Detection

Anomaly Detection by One Class Latent Regularized Networks

Unsupervised Graph Anomaly Detection on Directed Attribute Network

Multivariate Time-Series Anomaly Detection based on Enhancing Graph Attention Networks with Topological Analysis

GCN-based Multi-task Representation Learning for Anomaly Detection in Attributed Networks