Abstract:
A computer-implemented method, system, and computer program product are provided for anomaly detection. The method includes receiving, by a processor, sensor data from a plurality of sensors in a system. The method also includes generating, by the processor, a relationship model based on the sensor data. The method additionally includes updating, by the processor, the relationship model with new sensor data. The method further includes identifying, by the processor, an anomaly based on a fused single-variant time series fitness score in the relationship model. The method also includes controlling an operation of a processor-based machine to change a state of the processor-based machine, responsive to the anomaly.
Abstract:
Methods and systems for detecting anomalies include determining a predictive model for each pair of a set of time series, each time series being associated with a component of a system. New values of each pair of time series are compared to values predicted by the respective predictive model to determine if the respective predictive model is broken. A number of broken predictive models is determined. An anomaly alert is generated if the number of broken predictive models exceeds a threshold.
Abstract:
Systems and methods for managing one or more physical systems, including determining system behavior switching based on time series data from one or more sensors in the system. Time series is divided into a plurality of segments, and each of the segments represents a system behavior. A fitness model is generated for each of the segments to determine whether to select each of the segments as invariants, and an ensemble of local relationship models are built for each of the time series for each invariant to identify local behavior switching points over time. The identified local behavior switching points of each invariant are aggregated by aligning the local switching points of all invariant segments, computing a density distribution of the aligned switching points, and extracting local maximas of the density distribution to determine the global switching points. System operations are controlled based on the determined system behavior switching.