A new distributional treatment for time series anomaly detection

Kai Ming Ting,Zongyou Liu,Lei Gong,Hang Zhang,Ye Zhu
DOI: https://doi.org/10.1007/s00778-023-00832-x
2024-02-17
The VLDB Journal
Abstract:Time series is traditionally treated with two main approaches, i.e., the time domain approach and the frequency domain approach. These approaches must rely on a sliding window so that time-shift versions of a sequence can be measured to be similar. Coupled with the use of a root point-to-point measure, existing methods often have quadratic time complexity. We offer the third domain approach. It begins with an insight that sequences in a stationary time series can be treated as sets of independent and identically distributed (iid) points generated from an unknown distribution in . This domain treatment enables two new possibilities: (a) The similarity between two sequences can be computed using a distributional measure such as Wasserstein distance (WD), kernel mean embedding or isolation distributional kernel ( ), and (b) these distributional measures become non-sliding-window-based. Together, they offer an alternative that has more effective similarity measurements and runs significantly faster than the point-to-point and sliding-window-based measures. Our empirical evaluation shows that is an effective and efficient distributional measure for time series; and -based detectors have better detection accuracy than existing detectors in two tasks: (i) anomalous sequence detection in a stationary time series and (ii) anomalous time series detection in a dataset of non-stationary time series. The insight makes underutilized "old things new again" which gives existing distributional measures and anomaly detectors a new life in time series anomaly detection that would otherwise be impossible.
computer science, information systems, hardware & architecture
What problem does this paper attempt to address?