SlideShare a Scribd company logo
<Title>
Autoencoder Forest for Anomaly
Detection from IoT Time Series
Yiqun Hu, SP Group
Data Council Singapore 2019
Agenda
• Condition monitoring & anomaly detection
• Autoencoder for anomaly detection
• Autoencoder Forest
• End-to-end workflow
• Experiment results
Conditional monitoring & Anomaly
Detection
Condition monitoring
• Manual monitoring
– Huge human effort
– Boring task with low quality
• Rule-based method
– Cannot differentiate different
environment
– Cannot adapt to different
condition of the equipment
• Data-driven method
– Model the common behavior of
the equipment
Time-series anomaly detection
Autoencoder for Anomaly Detection
Autoencoder
• What is autoencoder
– A encoder-decoder type of neural network
architecture that is used for self-learning from
unlabeled data
• The idea of autoencoder
– Learn how to compress data into a concise
representation to allow for the reconstruction
with minimum error
• Different variants of autoencoder
– Variational Autoencoder
– LSTM Autoencoder
– Etc.
Autoencoder Neural Network
Autoencoder for anomaly detection
Online Detection
Anomaly score
Offline Training Reconstruction errors
Autoencoder Forest
A key challenge of autoencoder
Single Autoencoder
The idea of autoencoder forest
x
x
x
xx
x
x x
x
o
o
o
o
o
o
o
o
o
+
++ +
+
+ +
Clustering subsequence is meaningless
[1]. Eamonn Keogh, Jessica Lin, Clustering of Time Series Subsequences is Meaningless:
Implications for Previous and Future Research
Autoencoder forest based on time
0:00 1:00 1:30 22:00 23:30
Training autoencoder forest
Input Layer
Encoder layer 1
(window_size, 1)
(window_size/2, 1)
Encoder
layer 2
(window_size/4, 1)
Decoder layer 1 (window_size/2, 1)
Decoder Layer 2 (window_size, 1)
• Structure is fixed for every
autoencoder. (try to make it
as generic as possible)
• Each autoencoder within
forest is independent. So
the training is naturally
parallelizable
• Using early stopping
mechanism, the training of
individual autoencoder can
be stopped at similar
accuracy.
Autoencoder Forest
Single Autoencoder Autoencoder Forest
End-to-end Workflow
Automatic end-to-end workflow
Time series
analysis
Train Data
Preprocessing
Train Window
Extraction
Autoencoder
Forest Training
Test Data
Preprocessing
Test Window
Extraction
Anomaly scoring
Training
Anomaly
detection
Periodic pattern analysis
• Automatic determine the
repeating period in time
series
– Calculate autocorrelations of
different lags
– Find the strong local maximum
of autocorrelation
– Calculate the interval of any
two local maximum
– Find the mode of intervala
Missing data handling
3:05 3:10 3:15 3:20 …
…
16:15 16:21 16:24 16:30
…
…
Misalignment
Missing
3:05 3:10 3:15 3:20 …
…
16:15 (16:20 – 16:40) 16:45
…
…
? ? ?
• No need to impute
• If missing gap is small,
impute with
neighbouring points;
• If missing gap is large,
impute with the same
time of other periods;
Anomaly scoring
Extract the sequence
window end at time t
......
Median profile
Corresponding
autoencoder reconstruct
the sequence window at
time t
Compute
reconstruction error
as anomaly score
 
Learned
autoencoder forest
Experiment Results
Cooling tower – return water temperature
Chiller – chilled water return temperature
Smart meter – half hour consumption
2018-12-03 22:00:00
Normal data
2018-09-27 14:30:00 2018-10-06 22:30:00 2018-09-07 15:30:00
Top 3 Detected Anomaly
Autoencoder Forest for Anomaly Detection from IoT Time Series
A common platform for time series data, with built-in
AI capabilities
powering the nation

More Related Content

PDF
Anomaly Detection using Deep Auto-Encoders
PDF
An Introduction to Anomaly Detection
PDF
Federated Learning
PPTX
Seminar Presentation | Network Intrusion Detection using Supervised Machine L...
PDF
Anomaly detection Workshop slides
PPTX
Anomaly Detection - Real World Scenarios, Approaches and Live Implementation
PPTX
Anomaly detection with machine learning at scale
PDF
Anomaly Detection in Seasonal Time Series
Anomaly Detection using Deep Auto-Encoders
An Introduction to Anomaly Detection
Federated Learning
Seminar Presentation | Network Intrusion Detection using Supervised Machine L...
Anomaly detection Workshop slides
Anomaly Detection - Real World Scenarios, Approaches and Live Implementation
Anomaly detection with machine learning at scale
Anomaly Detection in Seasonal Time Series

What's hot (20)

PPTX
Deep learning approach for network intrusion detection system
PPTX
Introduction to Machine Learning
PDF
Autoencoder
PDF
Anomaly detection
PDF
Guiding through a typical Machine Learning Pipeline
PPTX
Adversarial Attacks and Defense
PDF
Anomaly Detection at Scale!
PDF
Anomaly Detection
PPTX
Data Quality for Machine Learning Tasks
PDF
Anomaly detection (Unsupervised Learning) in Machine Learning
PDF
DEF CON 23 - NSM 101 for ICS
PPTX
Anomaly Detection Technique
PPTX
Substitution techniques
PDF
Seminar Report | Network Intrusion Detection using Supervised Machine Learnin...
PDF
DMTM Lecture 06 Classification evaluation
PPTX
Machine Learning (Classification Models)
PPTX
Machine Learning in Cyber Security
PPT
pattern classification
PDF
Anomaly detection
PPTX
Anomaly detection
Deep learning approach for network intrusion detection system
Introduction to Machine Learning
Autoencoder
Anomaly detection
Guiding through a typical Machine Learning Pipeline
Adversarial Attacks and Defense
Anomaly Detection at Scale!
Anomaly Detection
Data Quality for Machine Learning Tasks
Anomaly detection (Unsupervised Learning) in Machine Learning
DEF CON 23 - NSM 101 for ICS
Anomaly Detection Technique
Substitution techniques
Seminar Report | Network Intrusion Detection using Supervised Machine Learnin...
DMTM Lecture 06 Classification evaluation
Machine Learning (Classification Models)
Machine Learning in Cyber Security
pattern classification
Anomaly detection
Anomaly detection
Ad

Similar to Autoencoder Forest for Anomaly Detection from IoT Time Series (20)

PPTX
Application of the Actor Model to Large Scale NDE Data Analysis
PDF
Autoencoder
PPTX
From ensembles to computer networks
PDF
Autoencoder in Deep Learning and its types
PPTX
Edge detection_Parallel Approach for CSA
PPTX
Detecting and Improving Distorted Fingerprints using rectification techniques.
PPTX
Home automation using MATLAB image processing
PDF
Machine learning and Autonomous System
PDF
The Diabolical Developers Guide to Performance Tuning
PPTX
Looking out for anomalies
PDF
Predictive Maintenance - Predict the Unpredictable
PDF
Machine learning for IoT - unpacking the blackbox
PPTX
Machine Learning Algorithms for Anomaly Detection in Particles Accelerators T...
PPTX
Real Time Object Dectection using machine learning
PDF
Web Crawler Detection Model
PDF
Explanation of Autoencoder to Variontal Auto Encoder
PPTX
slide-171212080528.pptx
PDF
End-to-End Object Detection with Transformers
PPTX
swatiVCprsentation artificial learning and machine learning.pptx
PPTX
Introduction to Autoencoders: Types and Applications
Application of the Actor Model to Large Scale NDE Data Analysis
Autoencoder
From ensembles to computer networks
Autoencoder in Deep Learning and its types
Edge detection_Parallel Approach for CSA
Detecting and Improving Distorted Fingerprints using rectification techniques.
Home automation using MATLAB image processing
Machine learning and Autonomous System
The Diabolical Developers Guide to Performance Tuning
Looking out for anomalies
Predictive Maintenance - Predict the Unpredictable
Machine learning for IoT - unpacking the blackbox
Machine Learning Algorithms for Anomaly Detection in Particles Accelerators T...
Real Time Object Dectection using machine learning
Web Crawler Detection Model
Explanation of Autoencoder to Variontal Auto Encoder
slide-171212080528.pptx
End-to-End Object Detection with Transformers
swatiVCprsentation artificial learning and machine learning.pptx
Introduction to Autoencoders: Types and Applications
Ad

Recently uploaded (20)

PPTX
Introduction-to-Cloud-ComputingFinal.pptx
PDF
Clinical guidelines as a resource for EBP(1).pdf
PPTX
Introduction to machine learning and Linear Models
PPTX
Business Acumen Training GuidePresentation.pptx
PDF
Lecture1 pattern recognition............
PPTX
AI Strategy room jwfjksfksfjsjsjsjsjfsjfsj
PDF
Recruitment and Placement PPT.pdfbjfibjdfbjfobj
PPTX
01_intro xxxxxxxxxxfffffffffffaaaaaaaaaaafg
PDF
“Getting Started with Data Analytics Using R – Concepts, Tools & Case Studies”
PPTX
1_Introduction to advance data techniques.pptx
PPTX
mbdjdhjjodule 5-1 rhfhhfjtjjhafbrhfnfbbfnb
PDF
.pdf is not working space design for the following data for the following dat...
PDF
Galatica Smart Energy Infrastructure Startup Pitch Deck
PPTX
Database Infoormation System (DBIS).pptx
PPT
Reliability_Chapter_ presentation 1221.5784
PPTX
Microsoft-Fabric-Unifying-Analytics-for-the-Modern-Enterprise Solution.pptx
PPTX
Data_Analytics_and_PowerBI_Presentation.pptx
PDF
annual-report-2024-2025 original latest.
PPTX
IB Computer Science - Internal Assessment.pptx
Introduction-to-Cloud-ComputingFinal.pptx
Clinical guidelines as a resource for EBP(1).pdf
Introduction to machine learning and Linear Models
Business Acumen Training GuidePresentation.pptx
Lecture1 pattern recognition............
AI Strategy room jwfjksfksfjsjsjsjsjfsjfsj
Recruitment and Placement PPT.pdfbjfibjdfbjfobj
01_intro xxxxxxxxxxfffffffffffaaaaaaaaaaafg
“Getting Started with Data Analytics Using R – Concepts, Tools & Case Studies”
1_Introduction to advance data techniques.pptx
mbdjdhjjodule 5-1 rhfhhfjtjjhafbrhfnfbbfnb
.pdf is not working space design for the following data for the following dat...
Galatica Smart Energy Infrastructure Startup Pitch Deck
Database Infoormation System (DBIS).pptx
Reliability_Chapter_ presentation 1221.5784
Microsoft-Fabric-Unifying-Analytics-for-the-Modern-Enterprise Solution.pptx
Data_Analytics_and_PowerBI_Presentation.pptx
annual-report-2024-2025 original latest.
IB Computer Science - Internal Assessment.pptx

Autoencoder Forest for Anomaly Detection from IoT Time Series

  • 1. <Title> Autoencoder Forest for Anomaly Detection from IoT Time Series Yiqun Hu, SP Group Data Council Singapore 2019
  • 2. Agenda • Condition monitoring & anomaly detection • Autoencoder for anomaly detection • Autoencoder Forest • End-to-end workflow • Experiment results
  • 3. Conditional monitoring & Anomaly Detection
  • 5. • Manual monitoring – Huge human effort – Boring task with low quality • Rule-based method – Cannot differentiate different environment – Cannot adapt to different condition of the equipment • Data-driven method – Model the common behavior of the equipment Time-series anomaly detection
  • 7. Autoencoder • What is autoencoder – A encoder-decoder type of neural network architecture that is used for self-learning from unlabeled data • The idea of autoencoder – Learn how to compress data into a concise representation to allow for the reconstruction with minimum error • Different variants of autoencoder – Variational Autoencoder – LSTM Autoencoder – Etc. Autoencoder Neural Network
  • 8. Autoencoder for anomaly detection Online Detection Anomaly score Offline Training Reconstruction errors
  • 10. A key challenge of autoencoder Single Autoencoder
  • 11. The idea of autoencoder forest x x x xx x x x x o o o o o o o o o + ++ + + + +
  • 12. Clustering subsequence is meaningless [1]. Eamonn Keogh, Jessica Lin, Clustering of Time Series Subsequences is Meaningless: Implications for Previous and Future Research
  • 13. Autoencoder forest based on time 0:00 1:00 1:30 22:00 23:30
  • 14. Training autoencoder forest Input Layer Encoder layer 1 (window_size, 1) (window_size/2, 1) Encoder layer 2 (window_size/4, 1) Decoder layer 1 (window_size/2, 1) Decoder Layer 2 (window_size, 1) • Structure is fixed for every autoencoder. (try to make it as generic as possible) • Each autoencoder within forest is independent. So the training is naturally parallelizable • Using early stopping mechanism, the training of individual autoencoder can be stopped at similar accuracy.
  • 17. Automatic end-to-end workflow Time series analysis Train Data Preprocessing Train Window Extraction Autoencoder Forest Training Test Data Preprocessing Test Window Extraction Anomaly scoring Training Anomaly detection
  • 18. Periodic pattern analysis • Automatic determine the repeating period in time series – Calculate autocorrelations of different lags – Find the strong local maximum of autocorrelation – Calculate the interval of any two local maximum – Find the mode of intervala
  • 19. Missing data handling 3:05 3:10 3:15 3:20 … … 16:15 16:21 16:24 16:30 … … Misalignment Missing 3:05 3:10 3:15 3:20 … … 16:15 (16:20 – 16:40) 16:45 … … ? ? ? • No need to impute • If missing gap is small, impute with neighbouring points; • If missing gap is large, impute with the same time of other periods;
  • 20. Anomaly scoring Extract the sequence window end at time t ...... Median profile Corresponding autoencoder reconstruct the sequence window at time t Compute reconstruction error as anomaly score   Learned autoencoder forest
  • 22. Cooling tower – return water temperature
  • 23. Chiller – chilled water return temperature
  • 24. Smart meter – half hour consumption 2018-12-03 22:00:00 Normal data 2018-09-27 14:30:00 2018-10-06 22:30:00 2018-09-07 15:30:00 Top 3 Detected Anomaly
  • 26. A common platform for time series data, with built-in AI capabilities