Abstract:Anomaly detection in multivariate time series has been widely studied in one-class classification (OCC) setting. The training samples in this setting are assumed to be normal. In more practical situations, it is difficult to guarantee that all samples are normal. Meanwhile, preparing a completely clean training dataset is costly and laborious. Such a case may degrade the performance of OCC-based anomaly detection methods which fit the training distribution as the normal distribution. To overcome this limitation, in this paper, we propose MTGFlow, an unsupervised anomaly detection approach for Multivariate Time series anomaly detection via dynamic Graph and entity-aware normalizing Flow. MTGFlow first estimates the density of the entire training samples and then identifies anomalous instances based on the density of the test samples within the fitted distribution. This relies on a widely accepted assumption that anomalous instances exhibit more sparse densities than normal ones, with no reliance on the clean training dataset. However, it is intractable to directly estimate the density due to the complex dependencies among entities and their diverse inherent characteristics, not to mention detecting anomalies based on the estimated distribution. In order to address these problems, we utilize the graph structure learning model to learn interdependent and evolving relations among entities, which effectively captures the complex and accurate distribution patterns of multivariate time series. In addition, our approach incorporates the unique characteristics of individual entities by employing an entity-aware normalizing flow. This enables us to represent each entity as a parameterized normal distribution. Furthermore, considering that some entities present similar characteristics, we propose a cluster strategy that capitalizes on the commonalities of entities with similar characteristics, resulting in more precise and detailed density estimation. We refer to this cluster-aware extension as MTGFlow_cluster. Extensive experiments are conducted on six widely used benchmark datasets, in which MTGFlow and MTGFlow_cluster demonstrate their superior detection performance.

Clustering-based anomaly detection in multivariate time series data

Anomaly detection in time series data using a fuzzy c-means clustering

Multivariate Time Series Anomaly Detection: A Framework of Hidden Markov Models

Anomaly Detection and Characterization in Spatial Time Series Data: A Cluster-Centric Approach

Clustering-Based Granular Representation of Time Series with Application to Collective Anomaly Detection

A Novel Multi-Level Framework for Anomaly Detection in Time Series Data

Causality-Based Multivariate Time Series Anomaly Detection

MFCD:A Deep Learning Method with Fuzzy Clustering for Time Series Anomaly Detection

A Time-Stamp Frequent Pattern-Based Clustering Method For Anomaly Detection

Label-Free Multivariate Time Series Anomaly Detection

An Anomaly Detection Framework for Time Series Data: an Interval-Based Approach

An Empirical Analysis of Anomaly Detection Methods for Multivariate Time Series

Exact variable-length anomaly detection algorithm for univariate and multivariate time series

Multivariate Time-Series Anomaly Detection via Graph Attention Network

Dynamic Micro-cluster-Based Streaming Data Clustering Method for Anomaly Detection.

A novel unsupervised framework for time series data anomaly detection via spectrum decomposition

HybridAD: A Hybrid Model-Driven Anomaly Detection Approach for Multivariate Time Series

A Multi-scale Parallel Unsupervised Model for Multivariate Time Series Anomaly Detection

An Unsupervised Anomaly Detection Algorithm for Time Series Big Data

Multidimensional Clustering Based Anomaly Detection Research

Rethinking Robust Multivariate Time Series Anomaly Detection: A Hierarchical Spatio-Temporal Variational Perspective