Unsupervised Anomaly Detection With LSTM Neural Networks
By Tolga Ergen, Suleyman Serdar Kozat. IEEE Transactions on Neural Networks and Learning Systems, 2017
311 citations recorded by the source corpus.
We investigate anomaly detection in an unsupervised framework and introduce long short-term memory (LSTM) neural network-based algorithms. In particular, given variable length data sequences, we first pass these sequences through our LSTM-based structure and obtain fixed-length sequences. We then find a decision function for our anomaly detectors based on the one-class support vector machines (OC-SVMs) and support vector data description (SVDD) algorithms. As the first time in the literature, we jointly train and optimize the parameters of the LSTM architecture and the OC-SVM (or SVDD) algorithm using highly effective gradient and quadratic programming-based training methods. To apply the gradient-based training method, we modify the original objective criteria of the OC-SVM and SVDD algorithms, where we prove the convergence of the modified objective criteria to the original criteria. We also provide extensions of our unsupervised formulation to the semisupervised and fully supervised frameworks. Thus, we obtain anomaly detection algorithms that can process variable length data sequences while providing high performance, especially for time series data. Our approach is generic so that we also apply this approach to the gated recurrent unit (GRU) architecture by directly replacing our LSTM-based structure with the GRU-based structure. In our experiments, we illustrate significant performance gains achieved by our algorithms with respect to the conventional methods.
Subfields: Artificial Intelligence, Computer Networks and Communications, Signal Processing
View Paper: https://www.semanticscholar.org/paper/898a12f14553bf5d5cb18458719b963c14bb81c8
Citations in the corpus
- Deep Learning for Time Series Anomaly Detection: A Survey (2022, unknown): “Ergen and Kozat [56] present LSTM-based anomaly detection algorithms in an unsupervised framework, as well as semi-supervised and fully supervised frameworks.”