Accession Number:

ADA512628

Title:

Adaptive Anomaly Detection using Isolation Forest

Descriptive Note:

Final rept. 21 Jan 2009-20 Jan 2010

Corporate Author:

MONASH UNIV CHURCHILL (AUSTRALIA) GIPPSLAND SCHOOL OF INFORMATION TECHNOLOGY

Personal Author(s):

Report Date:

2009-12-20

Pagination or Media Count:

31.0

Abstract:

This project developed an adaptive anomaly detection system based on Isolation Forest, applicable to data stream which demands single-scan online algorithms with poly-logarithmic time and space complexities. The proposed system based on Half-Space Tree, an extension of Isolation Forest, is not only capable of detecting anomalies when the underlying concept changes gradually over time, but also capable of detecting abrupt changes in the underlying concepts. Half-Space Trees is significantly better than three existing state-of-the-art distance-based and density-based methods, in terms of detection accuracy, time complexity and memory requirement.

Subject Categories:

  • Computer Programming and Software
  • Cybernetics

Distribution Statement:

APPROVED FOR PUBLIC RELEASE