OIPR: Evaluation for Time-series Anomaly Detection Inspired by Operator Interest
By: Yuhan Jing , Jingyu Wang , Lei Zhang and more
Potential Business Impact:
Measures how well computers find weird patterns in data.
With the growing adoption of time-series anomaly detection (TAD) technology, numerous studies have employed deep learning-based detectors for analyzing time-series data in the fields of Internet services, industrial systems, and sensors. The selection and optimization of anomaly detectors strongly rely on the availability of an effective performance evaluation method for TAD. Since anomalies in time-series data often manifest as a sequence of points, conventional metrics that solely consider the detection of individual point are inadequate. Existing evaluation methods for TAD typically employ point-based or event-based metrics to capture the temporal context. However, point-based metrics tend to overestimate detectors that excel only in detecting long anomalies, while event-based metrics are susceptible to being misled by fragmented detection results. To address these limitations, we propose OIPR, a novel set of TAD evaluation metrics. It models the process of operators receiving detector alarms and handling faults, utilizing area under the operator interest curve to evaluate the performance of TAD algorithms. Furthermore, we build a special scenario dataset to compare the characteristics of different evaluation methods. Through experiments conducted on the special scenario dataset and five real-world datasets, we demonstrate the remarkable performance of OIPR in extreme and complex scenarios. It achieves a balance between point and event perspectives, overcoming their primary limitations and offering applicability to broader situations.
Similar Papers
A Problem-Oriented Taxonomy of Evaluation Metrics for Time Series Anomaly Detection
Artificial Intelligence
Helps find fake data in computer signals.
An Evaluation Framework for Network IDS/IPS Datasets: Leveraging MITRE ATT&CK and Industry Relevance Metrics
Cryptography and Security
Makes computer security systems better at stopping real attacks.
Formally Exploring Time-Series Anomaly Detection Evaluation Metrics
Machine Learning (CS)
Finds hidden problems before systems break.