Given high-dimensional time series data (e.g., sensor data), how can we detect anomalous events, such as system faults and attacks? More challengingly, how can we do this in a way that captures complex inter-sensor relationships, and detects and explains anomalies which deviate from these relationships? Recently, deep learning approaches have enabled improvements in anomaly detection in high-dimensional datasets; however, existing methods do not explicitly learn the structure of existing relationships between variables, or use them to predict the expected behavior of time series. Our approach combines a structure learning approach with graph neural networks, additionally using attention weights to provide explainability for the detected anomalies. Experiments on two real-world sensor datasets with ground truth anomalies show that our method detects anomalies more accurately than baseline approaches, accurately captures correlations between sensors, and allows users to deduce the root cause of a detected anomaly.
翻译:鉴于高维时间序列数据(例如传感器数据),我们怎样才能探测系统断层和攻击等异常事件?更具有挑战性地说,我们如何能以捕捉复杂的传感器间关系和探测并解释偏离这些关系的异常现象的方式来做到这一点?最近,深层学习方法使高维数据集异常现象探测工作得以改进;然而,现有方法并未明确了解变量之间现有关系的结构,也未使用这些变量预测时间序列的预期行为。我们的方法将结构学习方法与图形神经网络相结合,还利用关注权重来解释所发现的异常现象。对两个真实世界传感器数据集的实验显示,我们的方法比基线方法更精确地探测异常现象,精确地捕捉传感器之间的相互关系,并使用户能够推断所检测到的异常现象的根源。