论文标题
多尺度的单级复发神经网络,用于离散事件序列异常检测
Multi-Scale One-Class Recurrent Neural Networks for Discrete Event Sequence Anomaly Detection
论文作者
论文摘要
离散的事件序列无处不在,例如信息和通信技术系统中的过程互动的有序事件系列。近年来,在检测异常序列异常方面的努力越来越多。但是,由于几个内在的挑战,包括数据不平衡问题,事件的离散属性以及数据的顺序性质,这仍然是一项非常困难的任务。为了解决这些挑战,在本文中,我们提出了OC4Seq,这是一种多尺度的单级复发性神经网络,用于检测离散事件序列中的异常。具体而言,OC4SEQ将反复的神经网络(RNN)集成了异常检测目标,将离散事件序列嵌入潜在空间中,可以轻松地检测到异常。另外,鉴于一个异常序列可能是由单个事件,事件子序列或整个序列引起的,因此我们设计了一个多尺度的RNN框架来同时捕获不同级别的顺序模式。三个基准数据集的实验结果表明,OC4SEQ始终超过各种代表性基准,较大的边距。此外,通过定量和定性分析,验证了捕获事件异常检测的多尺度顺序模式的重要性。
Discrete event sequences are ubiquitous, such as an ordered event series of process interactions in Information and Communication Technology systems. Recent years have witnessed increasing efforts in detecting anomalies with discrete-event sequences. However, it still remains an extremely difficult task due to several intrinsic challenges including data imbalance issues, the discrete property of the events, and sequential nature of the data. To address these challenges, in this paper, we propose OC4Seq, a multi-scale one-class recurrent neural network for detecting anomalies in discrete event sequences. Specifically, OC4Seq integrates the anomaly detection objective with recurrent neural networks (RNNs) to embed the discrete event sequences into latent spaces, where anomalies can be easily detected. In addition, given that an anomalous sequence could be caused by either individual events, subsequences of events, or the whole sequence, we design a multi-scale RNN framework to capture different levels of sequential patterns simultaneously. Experimental results on three benchmark datasets show that OC4Seq consistently outperforms various representative baselines by a large margin. Moreover, through both quantitative and qualitative analysis, the importance of capturing multi-scale sequential patterns for event anomaly detection is verified.