Detects illegal stock market trading behaviors using graph ranking methods.
problem Detecting irregular trade behaviors in the stock market.
method Three graph Laplacian based semi-supervised ranking methods.
result Un-normalized and symmetric normalized graph Laplacian based methods outperform the random walk Laplacian method.
Research explores unsupervised methods for detecting vessel behavior changes in real-time data streams.
problem Detecting shifts in vessel behavior for maritime traffic monitoring.
method Investigates unsupervised and semi-supervised change detection methods.
result Identifies shifts in vessel behavior for unusual events detection.
Detects student engagement states using unobtrusive appearance, context, and mouse data.
problem Detecting student engagement states in a classroom setting.
method Multimodal approach combining appearance, context, and mouse data; classifiers are fused at the decision level.
result Effective detection of student engagement states in a classroom setting.
MatchGNet detects malware by learning program behavior graphs.
problem Malware evasion through obfuscation and high false positives in traditional detection methods.
method Heterogeneous Graph Matching Network model that learns graph representation and similarity metrics.
result MatchGNet reduces false positives by 50% while maintaining zero false negatives.
Detects synchronized behavior in streaming data.
problem Tracking synchronized behavior in time-stamped tuples.
method AugSplicing algorithm for streaming dense block detection.
result Effective and robust in detecting anomalous behavior.
This work detects anomalous clients in federated learning to prevent their adverse impacts.
problem Detecting and preventing anomalous client behaviors in federated learning systems.
method Generates low-dimensional surrogates of model weight vectors and uses them for anomaly detection.
result The proposed detection-based approach significantly outperforms conventional defense-based methods.
System detects multiple patients' behaviors in real-time using mmWave radar and CNN.
problem Real-time patient behavior monitoring in hospitals.
method Used mmWave radar for tracking and collecting Doppler patterns. Created a three-layer CNN model for behavior classification.
result System achieved very good inference accuracy in predicting patient behaviors in real-time.
This paper discusses challenges and opportunities in vessel behavior detection using machine and deep learning.
problem Real-time analysis of vessel behaviors is crucial for maritime safety and protection.
method Comparison of classical machine learning and deep learning approaches for vessel event and anomaly detection.
result Novel methods and tools are needed to address challenges in vessel behavior detection.
Improved student engagement detection using contextual and visual data.
problem Detecting students' behavioral engagement in real-world settings.
method Two-phase approach: contextual logs for active use, appearance information for engagement inference.
result Improved F1-scores from 0.77 to 0.82 with contextual information.
Bayesian method models normal and anomalous behaviors using extreme value theory.
problem Challenges in setting optimal thresholds for anomaly detection.
method Probabilistic framework using Dirichlet Process Mixture Model and extreme value theory.
result Explicit modeling of normal and anomalous behaviors leads to robust anomaly detection.
A new method detects fraud transactions by analyzing user behavior over time.
problem Detecting fraud transactions in online payment platforms.
method A time attention based recurrent layer framework combining static and dynamic user behaviors.
result Our method outperforms state-of-the-art methods, especially in recall at top percent.
Paper uses DBSCAN variation to detect ship anomalies.
problem Detecting anomalous ship behavior.
method Variation of DBSCAN algorithm applied to AIS data.
result Alternative anomaly metric is more statistically informative.
DETECT clusters mobility behaviors from trajectories using deep learning.
problem Clustering similar mobility behaviors in large, complex trajectory data.
method DETECT uses deep learning to cluster mobility behaviors from trajectories, transforming and summarizing them to identify similar behaviors.
result DETECT effectively clusters mobility behaviors from real-world datasets.
Anomaly detection method separates contextual from behavioral attributes.
problem Detect anomalies in data without labeled examples.
method Uses joint deep variational generative models.
result Robust to anomalous or novel contextual attributes.
Detects anomalous behavior in social media users by analyzing content and connections.
problem Identifying disruptive patterns in user behavior on social media platforms.
method Joint representation learning of content and connection to detect anomalous behavior.
result Observed densely connected users engaging in local politics and exhibiting troll-like behavior.
A framework is proposed to detect anomalies in multi-modal data. A deep neural network-based object detector is employed to extract counts of objects and sub-events from the data. A cyclostationary model is proposed to model regular patterns of behavior in the count sequences. The anomaly detection problem is formulate…
Method detects multi-timescale consumer spending patterns from receipts.
problem Understanding and managing consumer behavior in high-dimensional data.
method Non-negative tensor factorization (NTF) to extract multi-timescale expenditure patterns.
result Consumption patterns are characterized based on spending behavior over different timescales.
New taxonomy for SCADA-based wind turbine fault detection improves model performance.
problem Lack of consensus on feature causality in normal behavior models.
method Presented a new taxonomy based on causal relations between input features and target.
result Evaluation of different feature configurations on fault detection performance.
Recent news cast doubts on London Interbank Offered Rate (LIBOR) integrity. Given its economic importance and the delay with which authorities realize about this situation, we aim to find an objective method in order to detect departures in the LIBOR rate that from the expected behavior. We analyze several interest rat…
Enhances Ponzi scheme detection on Ethereum using time-aware metapaths.
problem Lack of temporal information in heterogeneous transaction graphs.
method Time-aware Metapath Feature Augmentation (TMFAug) module.
result Significant performance improvements in Ponzi scheme detection.
Survey visual analytics methods for detecting anomalous user behaviors.
problem Understanding and detecting anomalous user behaviors in various domains.
method Survey and classification of visual analytics methods in four categories.
result Discussion of findings and potential research directions.
Research shows deep generative models' likelihoods are unreliable for anomaly detection.
problem Anomaly detection using deep generative models' likelihoods is unreliable.
method Examined the behavior of distribution densities through reparametrization.
result The likelihoods used for anomaly detection rely on strong and implicit hypotheses.
Paper builds ML classifier to detect crypto-ransomware.
problem Detecting crypto-ransomware with high accuracy and low false positives.
method Behavior-based detection using input/output activities and file-content entropy. Deep-learning classifier with adversarial research and Integrated Gradient method for explanation.
result Deep-learning classifier achieves high accuracy and low false positive rate in detecting crypto-ransomware.
Mechanical devices such as engines, vehicles, aircrafts, etc., are typically instrumented with numerous sensors to capture the behavior and health of the machine. However, there are often external factors or variables which are not captured by sensors leading to time-series which are inherently unpredictable. For insta…
Deep learning detects protective movement behavior in chronic pain patients.
problem Detecting protective movement behavior in chronic pain patients for intervention.
method End-to-end deep learning architecture named BodyAttentionNet (BANet) that learns temporal and bodily parts.
result Statistically significant improvements in detecting protective behavior using attention mechanisms.
The presence of noisy instances in mobile phone data is a fundamental issue for classifying user phone call behavior (i.e., accept, reject, missed and outgoing), with many potential negative consequences. The classification accuracy may decrease and the complexity of the classifiers may increase due to the number of re…
This research improves network security by detecting attacks using SVM and dimension reduction.
problem Detecting and preventing attacks on computer networks.
method Combining SVM and SVD for anomaly detection.
result The proposed method outperforms other methods in detecting network attacks.
Hierarchical VAEs detect out-of-distribution data by identifying low-level in-distribution features.
problem Out-of-distribution data often has in-distribution low-level features, leading to misleading likelihood estimates in deep generative models.
method Developed a fast, scalable, unsupervised likelihood-ratio score for out-of-distribution detection based on hierarchical variational autoencoders.
result Achieved state-of-the-art results on out-of-distribution detection across various data and model combinations.
DeepHGNN detects program identity changes using system behaviors.
problem Detecting program identity changes to prevent malware.
method Attentional heterogeneous graph neural network (DeepHGNN) for graph classification.
result DeepHGNN effectively identifies program identities across various metrics.
A new method tunes LOF hyperparameters for better anomaly detection.
problem Tuning hyperparameters for LOF improves anomaly detection performance.
method Heuristic methodology to tune LOF hyperparameters.
result Tuned LOF model outperforms in simulations and real data sets.
A predictor that is deployed in a live production system may perturb the features it uses to make predictions. Such a feedback loop can occur, for example, when a model that predicts a certain type of behavior ends up causing the behavior it predicts, thus creating a self-fulfilling prophecy. In this paper we analyze p…
Deep learning improves combustor anomaly detection in gas turbines.
problem Improving anomaly detection performance in gas turbine combustors.
method Hierarchically learned features from exhaust gas temperature sensor measurements using deep learning.
result Deep learning-based anomaly detection significantly improved combustor anomaly detection performance.
Deep learning autoencoder detects bee colony anomalies.
problem Early detection of bee swarms and other unusual behaviors.
method Deep Recurrent Autoencoder model trained on sensor data.
result Autoencoder detects anomalies independent of their origin.
Intrusion detection for computer network systems has been becoming one of the most critical tasks for network administrators today. It has an important role for organizations, governments and our society due to the valuable resources hosted on computer networks. Traditional misuse detection strategies are unable to det…
A contaminated mixture model detects outliers in multivariate functional data.
problem Detecting abnormal sensor measurements in multivariate functional data.
method A contaminated mixture model that clusters and detects outliers without specifying outlier proportion.
result The model outperforms competitors and correctly detects abnormal behaviors in real data.
Detects malicious accounts in permissionless blockchains using graph properties and ML.
problem Identifying and classifying malicious accounts in permissionless blockchains.
method Temporal graph properties, ML algorithms (ExtraTreesClassifier, K-Means), cosine similarity, behavior change analysis.
result ExtraTreesClassifier performs best in detecting malicious accounts on Ethereum blockchain.
Due to the popularity of the Internet and smart mobile devices, more and more financial transactions and activities have been digitalized. Compared to traditional financial fraud detection strategies using credit-related features, customers are generating a large amount of unstructured behavioral data every second. In …
Data science detects Ethereum honeypots using transaction behavior.
problem Detecting and identifying new Ethereum honeypots.
method Data science approach based on transaction behavior features.
result Data science approach detects new and previously unknown honeypots.
Active learning improves network intrusion detection with minimal labeled data.
problem Finding new attack vectors in low-volume traffic.
method Proposes an active learning framework to minimize labeled data while improving detection quality.
result Active learning with minimal labeled data significantly improves anomaly detection in network traffic.
Remembering our day-to-day social interactions is challenging even if you aren't a blue memory challenged fish. The ability to automatically detect and remember these types of interactions is not only beneficial for individuals interested in their behavior in crowded situations, but also of interest to those who analyz…
This paper addresses the problem of change-point detection on sequences of high-dimensional and heterogeneous observations, which also possess a periodic temporal structure. Due to the dimensionality problem, when the time between change-points is on the order of the dimension of the model parameters, drifts in the und…
In this work we consider the problem of detecting anomalous spatio-temporal behavior in videos. Our approach is to learn the normative multiframe pixel joint distribution and detect deviations from it using a likelihood based approach. Due to the extreme lack of available training samples relative to the dimension of t…
New measure quantifies financial erratic behavior.
problem Measuring similarity between erratic financial time series.
method Combining probability distributions and Bayesian change point detection.
result Greater similarity among sectors than countries in erratic behavior.
Study of urban lifestyles from mobility data of 1.2M people in 11 U.S. cities.
problem Lack of interpretability in digital mobility data for understanding urban lifestyles.
method Privacy-enhanced dataset of mobility visitation patterns, latent activity behavior decomposition.
result Detected 12 latent activity behaviors that describe urban lifestyles, not single lifestyles.
New method for valid and exact statistical inference of multi-dimensional change-points.
problem Statistical inference of change-points in multi-dimensional sequences.
method Proposes a method to guarantee the statistical reliability of both location and components of detected changes.
result Demonstrates the effectiveness of the method in genomic abnormality identification and human behavior analysis.
In financial markets, abnormal trading behaviors pose a serious challenge to market surveillance and risk management. What is worse, there is an increasing emergence of abnormal trading events that some experienced traders constitute a collusive clique and collaborate to manipulate some instruments, thus mislead other …
Proposes a real-time anomaly detection system using IRL.
problem Real-time anomaly detection in sequential data.
method Uses inverse reinforcement learning to infer reward function and evaluate anomalies.
result Effective in identifying anomalies in real-world data.
This paper detects anomalies in cellular network traffic using hybrid methods.
problem Detecting anomalies in network traffic for security and analysis.
method Hybrid method combining GARCH, K-means, and Neural Network.
result Anomaly detection in cellular network traffic successfully achieved.