Outlier detection is critical in real applications to prevent financial fraud, defend network intrusions, or detecting imminent device failures. To reduce the human effort in evaluating outlier detection results and effectively turn the outliers into actionable insights, the users often expect a system to automatically produce interpretable summarizations of subgroups of outlier detection results. Unfortunately, to date no such systems exist. To fill this gap, we propose STAIR which learns a compact set of human understandable rules to summarize and explain the anomaly detection results. Rather than use the classical decision tree algorithms to produce these rules, STAIR proposes a new optimization objective to produce a small number of rules with least complexity, hence strong interpretability, to accurately summarize the detection results. The learning algorithm of STAIR produces a rule set by iteratively splitting the large rules and is optimal in maximizing this objective in each iteration. Moreover, to effectively handle high dimensional, highly complex data sets which are hard to summarize with simple rules, we propose a localized STAIR approach, called L-STAIR. Taking data locality into consideration, it simultaneously partitions data and learns a set of localized rules for each partition. Our experimental study on many outlier benchmark datasets shows that STAIR significantly reduces the complexity of the rules required to summarize the outlier detection results, thus more amenable for humans to understand and evaluate, compared to the decision tree methods.
翻译:为了减少人类在评价外部检测结果和有效地将出口结果转化为可操作的洞察力方面所做的努力,用户往往期望一个系统自动生成可解释的外部检测结果分组汇总。不幸的是,迄今为止还没有这样的系统。为了填补这一空白,我们提议STAIR,它学习一套难以用简单规则来总结和解释异常检测结果的精密和高度复杂的数据集。我们建议采用一种本地化的STAIR方法,称为L-STAIR。考虑到数据位置,它同时对数据进行分解,并学会对检测结果进行准确的总结。STAIR的学习算法产生了一套规则,通过迭接地分割大规则,是将每个规则最大化的最好办法。此外,为了有效地处理难以用简单规则来总结和解释异常检测结果的高维度、高度复杂的数据集,我们建议一种本地化的STAIR方法,称为L-STAIR。考虑到数据的位置,它同时对数据进行分解,并学习对检测结果作出准确的总结。STAIR的算法通过反复的拼凑方法,从而将每个规则的本地化的精确性标定结果转化为我们的实验室。</s>