Revitalizing Self-Organizing Map: Anomaly Detection Using Forecasting Error Patterns - Inria - Institut national de recherche en sciences et technologies du numérique
Conference Papers Year : 2021

Revitalizing Self-Organizing Map: Anomaly Detection Using Forecasting Error Patterns

Young Geun Kim
  • Function : Author
Jeong-Han Yun
  • Function : Author
Siho Han
  • Function : Author
Hyoung Chun Kim
  • Function : Author
Simon S. Woo
  • Function : Author
  • PersonId : 1117621

Abstract

Detecting rare cases of anomalies in Cyber-Physical Systems (CPSs) is an extremely challenging task. It is especially difficult to accurately model various instances of CPS measurements due to the dearth of anomaly samples and the subtlety of how their patterns appear. Moreover, the detection performance may be severely limited owing to mediocre or inaccurate forecasting by the underlying prediction models. In this work, we focus on improving the anomaly detection performance by leveraging the forecasting error patterns generated from prediction models, such as Sequence-to-Sequence (seq2seq), Mixture Density Networks (MDNs), and Recurrent Neural Networks (RNNs). To this end, we introduce Self-Organizing Map-based Anomaly Detector (SOMAD), an anomaly detection framework based on a novel test statistic, SomAnomaly, for Cyber-Physical System (CPS) security. Upon evaluation on two popular CPS datasets, we demonstrate that SOMAD outperforms baseline approaches through online multiple testing, using Time-Series Aware Precision and Recall (TaPR) metrics. Accordingly, we empirically demonstrate that forecasting error patterns of raw CPS data can be useful when detecting anomalies through a fast, statistical multiple testing approach such as ours.
Fichier principal
Vignette du fichier
512098_1_En_25_Chapter.pdf (1.26 Mo) Télécharger le fichier
Origin Files produced by the author(s)

Dates and versions

hal-03746038 , version 1 (04-08-2022)

Licence

Identifiers

Cite

Young Geun Kim, Jeong-Han Yun, Siho Han, Hyoung Chun Kim, Simon S. Woo. Revitalizing Self-Organizing Map: Anomaly Detection Using Forecasting Error Patterns. 36th IFIP International Conference on ICT Systems Security and Privacy Protection (SEC), Jun 2021, Oslo, Norway. pp.382-397, ⟨10.1007/978-3-030-78120-0_25⟩. ⟨hal-03746038⟩
30 View
43 Download

Altmetric

Share

More