Learning States and Rules for Detecting Anomalies in Time Series

Authors:
Stan Salvador;Philip Chan
Affiliations:
Department of Computer Sciences, Florida Institute of Technology, Melbourne 32901;Department of Computer Sciences, Florida Institute of Technology, Melbourne 32901
Venue:
Applied Intelligence
Year:
2005

Citing 11
Cited 5

A robust and scalable clustering algorithm for mixed type attributes in large database environment

Proceedings of the seventh ACM SIGKDD international conference on Knowledge discovery and data mining
Chameleon: Hierarchical Clustering Using Dynamic Modeling

Computer
An Online Algorithm for Segmenting Time Series

ICDM '01 Proceedings of the 2001 IEEE International Conference on Data Mining
WaveCluster: A Multi-Resolution Clustering Approach for Very Large Spatial Databases

VLDB '98 Proceedings of the 24rd International Conference on Very Large Data Bases
Efficient and Effective Clustering Methods for Spatial Data Mining

VLDB '94 Proceedings of the 20th International Conference on Very Large Data Bases
The Kindest Cut: Minimum Message Length Segmentation

ALT '96 Proceedings of the 7th International Workshop on Algorithmic Learning Theory
Consensus Clustering: A Resampling-Based Method for Class Discovery and Visualization of Gene Expression Microarray Data

Machine Learning
A Parameterless Method for Efficiently Discovering Clusters of Arbitrary Shape in Large Datasets

ICDM '02 Proceedings of the 2002 IEEE International Conference on Data Mining
Estimating the number of segments in time series data using permutation tests

ICDM '02 Proceedings of the 2002 IEEE International Conference on Data Mining
ROCK: A Robust Clustering Algorithm for Categorical Attributes

ICDE '99 Proceedings of the 15th International Conference on Data Engineering
Subspace Information Criterion for Model Selection

Neural Computation

Modeling Multiple Time Series for Anomaly Detection

ICDM '05 Proceedings of the Fifth IEEE International Conference on Data Mining
One class support vector machine for anomaly detection in the communication network performance data

ELECTROSCIENCE'07 Proceedings of the 5th conference on Applied electromagnetics, wireless and optical communications
A data mining framework for time series estimation

Journal of Biomedical Informatics
Feasibility of one-class-SVM for anomaly detection in telecommunication network

CIMMACS'07 Proceedings of the 6th WSEAS international conference on Computational intelligence, man-machine systems and cybernetics
Outlier detection of air temperature series data using probabilistic finite state automata-based algorithm

Complexity

Quantified Score

Hi-index	0.00

Visualization

Abstract

The normal operation of a device can be characterized in different temporal states. To identify these states, we introduce a segmentation algorithm called Gecko that can determine a reasonable number of segments using our proposed L method. We then use the RIPPER classification algorithm to describe these states in logical rules. Finally, transitional logic between the states is added to create a finite state automaton. Our empirical results, on data obtained from the NASA shuttle program, indicate that the Gecko segmentation algorithm is comparable to a human expert in identifying states, and our L method performs better than the existing permutation tests method when determining the number of segments to return in segmentation algorithms. Empirical results have also shown that our overall system can track normal behavior and detect anomalies.