Robust anomaly detection algorithms for real-time big data: Comparison of algorithms. Hasani, Z. In 2017 6th Mediterranean Conference on Embedded Computing (MECO), pages 1–6, June, 2017. doi abstract bibtex Most of the today's world data are streaming, time-series data, where anomalies detection gives significant information of possible critical situations. Yet, detecting anomalies in big streaming data is a difficult task, requiring detectors to acquire and process data in a real-time, as they occur, even before they are stored and instantly alarm on potential threats. Suitable to the need for real-time alarm and unsupervised procedures for massive streaming data anomaly detection, algorithms have to be robust, with low processing time, eventually at the cost of the accuracy. In this work we explore several such fast algorithms like MAD, RunMAD, Boxplot, Twitter ADVec, DBSCAN, Moving Range Technique, Statistical Control Chart Techniques, ARIMA and Moving Average. The algorithms are tested and results are visualized in the system R, on the three Numenta datasets, with known anomalies and own e-dnevnik dataset with unknown anomalies. Evaluation is done by comparing achieved results (the algorithm execution time, CPU usage and the number of anomalies found) with Numenta HTM algorithm that detects all the anomalies in their datasets. Our interest is monitoring of the streaming log data that are generating in the national educational network (e-dnevnk) that acquires a massive number of online queries and to detect anomalies in order to scale up performance, prevent network downs, alarm on possible attacks and similar.
@inproceedings{hasani_robust_2017,
title = {Robust anomaly detection algorithms for real-time big data: {Comparison} of algorithms},
shorttitle = {Robust anomaly detection algorithms for real-time big data},
doi = {10.1109/MECO.2017.7977130},
abstract = {Most of the today's world data are streaming, time-series data, where anomalies detection gives significant information of possible critical situations. Yet, detecting anomalies in big streaming data is a difficult task, requiring detectors to acquire and process data in a real-time, as they occur, even before they are stored and instantly alarm on potential threats. Suitable to the need for real-time alarm and unsupervised procedures for massive streaming data anomaly detection, algorithms have to be robust, with low processing time, eventually at the cost of the accuracy. In this work we explore several such fast algorithms like MAD, RunMAD, Boxplot, Twitter ADVec, DBSCAN, Moving Range Technique, Statistical Control Chart Techniques, ARIMA and Moving Average. The algorithms are tested and results are visualized in the system R, on the three Numenta datasets, with known anomalies and own e-dnevnik dataset with unknown anomalies. Evaluation is done by comparing achieved results (the algorithm execution time, CPU usage and the number of anomalies found) with Numenta HTM algorithm that detects all the anomalies in their datasets. Our interest is monitoring of the streaming log data that are generating in the national educational network (e-dnevnk) that acquires a massive number of online queries and to detect anomalies in order to scale up performance, prevent network downs, alarm on possible attacks and similar.},
booktitle = {2017 6th {Mediterranean} {Conference} on {Embedded} {Computing} ({MECO})},
author = {Hasani, Zirije},
month = jun,
year = {2017},
keywords = {ARIMA, Autoregressive processes, Big Data, Boxplot, CPU usage, Classification algorithms, Clustering algorithms, Control charts, DBSCAN, HTM, Log data, MAD, Moving Average, Moving Range Technique, NuPIC, Numenta dataset, R, R system, Real-time systems, RunMAD, Statistical Control Chart Techniques, Time series analysis, Twitter ADVec, algorithm execution time, anomaly detection, autoregressive moving average processes, component, control charts, data processing, e-dnevnik dataset, educational administrative data processing, known-anomalies, moving average technique, moving range technique, national educational network, network down prevention, online queries, outlier detection, real-time Big Data, real-time alarm procedure, real-time big data, robust anomaly detection algorithm, social networking (online), statistical control chart technique, unknown anomalies, unsupervised learning, unsupervised procedure, visualization},
pages = {1--6},
}
Downloads: 0
{"_id":"rBvroSWifWscjcJxm","bibbaseid":"hasani-robustanomalydetectionalgorithmsforrealtimebigdatacomparisonofalgorithms-2017","author_short":["Hasani, Z."],"bibdata":{"bibtype":"inproceedings","type":"inproceedings","title":"Robust anomaly detection algorithms for real-time big data: Comparison of algorithms","shorttitle":"Robust anomaly detection algorithms for real-time big data","doi":"10.1109/MECO.2017.7977130","abstract":"Most of the today's world data are streaming, time-series data, where anomalies detection gives significant information of possible critical situations. Yet, detecting anomalies in big streaming data is a difficult task, requiring detectors to acquire and process data in a real-time, as they occur, even before they are stored and instantly alarm on potential threats. Suitable to the need for real-time alarm and unsupervised procedures for massive streaming data anomaly detection, algorithms have to be robust, with low processing time, eventually at the cost of the accuracy. In this work we explore several such fast algorithms like MAD, RunMAD, Boxplot, Twitter ADVec, DBSCAN, Moving Range Technique, Statistical Control Chart Techniques, ARIMA and Moving Average. The algorithms are tested and results are visualized in the system R, on the three Numenta datasets, with known anomalies and own e-dnevnik dataset with unknown anomalies. Evaluation is done by comparing achieved results (the algorithm execution time, CPU usage and the number of anomalies found) with Numenta HTM algorithm that detects all the anomalies in their datasets. Our interest is monitoring of the streaming log data that are generating in the national educational network (e-dnevnk) that acquires a massive number of online queries and to detect anomalies in order to scale up performance, prevent network downs, alarm on possible attacks and similar.","booktitle":"2017 6th Mediterranean Conference on Embedded Computing (MECO)","author":[{"propositions":[],"lastnames":["Hasani"],"firstnames":["Zirije"],"suffixes":[]}],"month":"June","year":"2017","keywords":"ARIMA, Autoregressive processes, Big Data, Boxplot, CPU usage, Classification algorithms, Clustering algorithms, Control charts, DBSCAN, HTM, Log data, MAD, Moving Average, Moving Range Technique, NuPIC, Numenta dataset, R, R system, Real-time systems, RunMAD, Statistical Control Chart Techniques, Time series analysis, Twitter ADVec, algorithm execution time, anomaly detection, autoregressive moving average processes, component, control charts, data processing, e-dnevnik dataset, educational administrative data processing, known-anomalies, moving average technique, moving range technique, national educational network, network down prevention, online queries, outlier detection, real-time Big Data, real-time alarm procedure, real-time big data, robust anomaly detection algorithm, social networking (online), statistical control chart technique, unknown anomalies, unsupervised learning, unsupervised procedure, visualization","pages":"1–6","bibtex":"@inproceedings{hasani_robust_2017,\n\ttitle = {Robust anomaly detection algorithms for real-time big data: {Comparison} of algorithms},\n\tshorttitle = {Robust anomaly detection algorithms for real-time big data},\n\tdoi = {10.1109/MECO.2017.7977130},\n\tabstract = {Most of the today's world data are streaming, time-series data, where anomalies detection gives significant information of possible critical situations. Yet, detecting anomalies in big streaming data is a difficult task, requiring detectors to acquire and process data in a real-time, as they occur, even before they are stored and instantly alarm on potential threats. Suitable to the need for real-time alarm and unsupervised procedures for massive streaming data anomaly detection, algorithms have to be robust, with low processing time, eventually at the cost of the accuracy. In this work we explore several such fast algorithms like MAD, RunMAD, Boxplot, Twitter ADVec, DBSCAN, Moving Range Technique, Statistical Control Chart Techniques, ARIMA and Moving Average. The algorithms are tested and results are visualized in the system R, on the three Numenta datasets, with known anomalies and own e-dnevnik dataset with unknown anomalies. Evaluation is done by comparing achieved results (the algorithm execution time, CPU usage and the number of anomalies found) with Numenta HTM algorithm that detects all the anomalies in their datasets. Our interest is monitoring of the streaming log data that are generating in the national educational network (e-dnevnk) that acquires a massive number of online queries and to detect anomalies in order to scale up performance, prevent network downs, alarm on possible attacks and similar.},\n\tbooktitle = {2017 6th {Mediterranean} {Conference} on {Embedded} {Computing} ({MECO})},\n\tauthor = {Hasani, Zirije},\n\tmonth = jun,\n\tyear = {2017},\n\tkeywords = {ARIMA, Autoregressive processes, Big Data, Boxplot, CPU usage, Classification algorithms, Clustering algorithms, Control charts, DBSCAN, HTM, Log data, MAD, Moving Average, Moving Range Technique, NuPIC, Numenta dataset, R, R system, Real-time systems, RunMAD, Statistical Control Chart Techniques, Time series analysis, Twitter ADVec, algorithm execution time, anomaly detection, autoregressive moving average processes, component, control charts, data processing, e-dnevnik dataset, educational administrative data processing, known-anomalies, moving average technique, moving range technique, national educational network, network down prevention, online queries, outlier detection, real-time Big Data, real-time alarm procedure, real-time big data, robust anomaly detection algorithm, social networking (online), statistical control chart technique, unknown anomalies, unsupervised learning, unsupervised procedure, visualization},\n\tpages = {1--6},\n}\n\n","author_short":["Hasani, Z."],"key":"hasani_robust_2017","id":"hasani_robust_2017","bibbaseid":"hasani-robustanomalydetectionalgorithmsforrealtimebigdatacomparisonofalgorithms-2017","role":"author","urls":{},"keyword":["ARIMA","Autoregressive processes","Big Data","Boxplot","CPU usage","Classification algorithms","Clustering algorithms","Control charts","DBSCAN","HTM","Log data","MAD","Moving Average","Moving Range Technique","NuPIC","Numenta dataset","R","R system","Real-time systems","RunMAD","Statistical Control Chart Techniques","Time series analysis","Twitter ADVec","algorithm execution time","anomaly detection","autoregressive moving average processes","component","control charts","data processing","e-dnevnik dataset","educational administrative data processing","known-anomalies","moving average technique","moving range technique","national educational network","network down prevention","online queries","outlier detection","real-time Big Data","real-time alarm procedure","real-time big data","robust anomaly detection algorithm","social networking (online)","statistical control chart technique","unknown anomalies","unsupervised learning","unsupervised procedure","visualization"],"metadata":{"authorlinks":{}}},"bibtype":"inproceedings","biburl":"https://bibbase.org/zotero/mh_lenguyen","dataSources":["iwKepCrWBps7ojhDx"],"keywords":["arima","autoregressive processes","big data","boxplot","cpu usage","classification algorithms","clustering algorithms","control charts","dbscan","htm","log data","mad","moving average","moving range technique","nupic","numenta dataset","r","r system","real-time systems","runmad","statistical control chart techniques","time series analysis","twitter advec","algorithm execution time","anomaly detection","autoregressive moving average processes","component","control charts","data processing","e-dnevnik dataset","educational administrative data processing","known-anomalies","moving average technique","moving range technique","national educational network","network down prevention","online queries","outlier detection","real-time big data","real-time alarm procedure","real-time big data","robust anomaly detection algorithm","social networking (online)","statistical control chart technique","unknown anomalies","unsupervised learning","unsupervised procedure","visualization"],"search_terms":["robust","anomaly","detection","algorithms","real","time","big","data","comparison","algorithms","hasani"],"title":"Robust anomaly detection algorithms for real-time big data: Comparison of algorithms","year":2017}