Transformer-based Multivariate Time Series Anomaly Localization
Charalampos Shimillas, Kleanthis Malialis, Konstantinos Fokianos, Marios M. Polycarpou
TL;DR
This work addresses the challenge of localizing anomalies in multivariate time series from CPS/IoT data by introducing a transformer-based framework that couples representation learning with two localization scores. The Space-Time Anomaly Score (STAS) leverages transformer latent representations to detect per-series anomalies while accounting for inter-series dependencies, and the Statistical Feature Anomaly Score (SFAS) provides a corrective signal using statistical features around anomalies. Together, STAS and SFAS enable accurate time-step, window-based, and segment-based localization, demonstrated to outperform state-of-the-art methods on synthetic and real-world datasets. The approach emphasizes unsupervised anomaly diagnosis, interpretability through attention-based analysis, and practical deployment considerations such as real-time scoring and CUSUM-based detection. This has potential impact for reliable CPS/IoT monitoring by enabling actionable, localized anomaly insights with robust performance across diverse data domains.
Abstract
With the growing complexity of Cyber-Physical Systems (CPS) and the integration of Internet of Things (IoT), the use of sensors for online monitoring generates large volume of multivariate time series (MTS) data. Consequently, the need for robust anomaly diagnosis in MTS is paramount to maintaining system reliability and safety. While significant advancements have been made in anomaly detection, localization remains a largely underexplored area, though crucial for intelligent decision-making. This paper introduces a novel transformer-based model for unsupervised anomaly diagnosis in MTS, with a focus on improving localization performance, through an in-depth analysis of the self-attention mechanism's learning behavior under both normal and anomalous conditions. We formulate the anomaly localization problem as a three-stage process: time-step, window, and segment-based. This leads to the development of the Space-Time Anomaly Score (STAS), a new metric inspired by the connection between transformer latent representations and space-time statistical models. STAS is designed to capture individual anomaly behaviors and inter-series dependencies, delivering enhanced localization performance. Additionally, the Statistical Feature Anomaly Score (SFAS) complements STAS by analyzing statistical features around anomalies, with their combination helping to reduce false alarms. Experiments on real world and synthetic datasets illustrate the model's superiority over state-of-the-art methods in both detection and localization tasks.
