Anomaly detection is an active research topic in many different fields such as intrusion detection, network monitoring, system health monitoring, IoT healthcare, etc. However, many existing anomaly detection approaches require either human intervention or domain knowledge, and may suffer from high computation complexity, consequently hindering their applicability in real-world scenarios. Therefore, a lightweight and ready-to-go approach that is able to detect anomalies in real-time is highly sought-after. Such an approach could be easily and immediately applied to perform time series anomaly detection on any commodity machine. The approach could provide timely anomaly alerts and by that enable appropriate countermeasures to be undertaken as early as possible. With these goals in mind, this paper introduces ReRe, which is a Real-time Ready-to-go proactive Anomaly Detection algorithm for streaming time series. ReRe employs two lightweight Long Short-Term Memory (LSTM) models to predict and jointly determine whether or not an upcoming data point is anomalous based on short-term historical data points and two long-term self-adaptive thresholds. Experiments based on real-world time-series datasets demonstrate the good performance of ReRe in real-time anomaly detection without requiring human intervention or domain knowledge.
翻译:异常探测是许多不同领域的积极研究课题,如入侵探测、网络监测、系统健康监测、IOT保健等。 然而,许多现有的异常探测方法需要人际干预或领域知识,可能存在高计算复杂性,从而妨碍其在现实世界情景中的适用性。因此,非常需要采用轻量和即时即时即时检测方法,以便能够实时检测异常。这种方法可以很容易地立即用于在任何商品机器上进行时间序列异常探测。这种方法可以及时提供异常警报,并使得能够尽早采取适当的应对措施。考虑到这些目标,本文件介绍ReReRe,这是一个实时即时即时即时即时自动探测时间序列的算法。Re 重新使用两个轻量的短期内存(LSTM)模型来预测和共同确定一个数据点是否根据短期历史数据点和两个长期自我适应阈值进行反常点。基于真实世界时序数据设置的实验可以证明实时实时数据设置的良好性能,而无需实时检测或实时异常现象。