With the development of hardware technology, we can collect increasingly reliable time series data, in which time series anomaly detection is an important task to find problems in time and avoid risks. It is not easy to establish a multivariate time series anomaly detection system, because the collected data not only have different attributes, scales, and characteristic information but also have horizontal and vertical connections among these data collected by various sensors. In addition, there is no clear boundary regarding whether the data are abnormal, and there is currently no unified definition of multidimensional time-series anomalies. Recently, deep learning methods have shown outstanding advantages in the processing of multidimensional time series. In this paper, we propose a definition of point anomalies in multivariate time series and an unsupervised deep learning method, the multilayer convolutional recurrent autoencoded anomaly detector (MCRAAD), which is used to detect anomalies in multivariate time series. We calculate the feature matrix sequence through the data in the sliding window, extract the characteristics of the feature matrix sequence by a multilayer convolutional encoder, obtain the time relations in the feature matrix by using several ConvLSTM units, and finally reconstruct the feature matrix sequence with the convolutional decoder to predict the self-feature matrix. In addition, we propose a threshold setting method to assist with the determination of anomalies. Finally, we test our model on synthetic datasets and a real dataset of house monitoring. The results of experiments show that our method is superior to these basic models in detecting ability and robustness. This model also provides an effective method for multivariate time-series anomaly detection in real life.
20 December 2017 in IEEE/CAA Journal of Automatica Sinica
Consistency degree calculation is established on the basis of known correspondence, but in real life, the correspondence is generally unknown, so how to calculate consistency of two models under unknown correspondence has become a problem. For this condition, we should analyze unknown correspondence due to the influence of different correspondences. In this paper we obtain the relations of transitions based on event relations using branching processes, and build a behavioral matrix of relations. Based on the permutation of behavioral matrix, we express different correspondences, and define a new formula to compute the maximal consistency degree of two workflow nets. Additionally, this paper utilizes an example to show these definitions, computation as well as the advantages.
With the rapid development of the Internet and the continuous progress of computer science and technology, Internet-based online trading has developed rapidly and improved the convenience of everyday life. Increasingly, people conduct business activities through online transactions and payment methods, and the development prospects for online transactions are quite broad. In addition, e-commerce trading systems have attracted considerable attention. Many studies have been conducted to analyze the behaviors of these systems. This paper focuses on analyzing both system behavior and user behavior in e-commerce trading systems. To reflect the characteristics of online trading systems, system behavior reflects the strength of the system, while user behavior reflects various user actions. Consistency, which is a basis for determining whether two objects are similar, provides a reference for designers and modelers. This paper also focuses on analyzing the consistency of system behavior, especially regarding the measurement and diagnosis of e-commerce trading systems. Then, we study the existing user behavior analysis methods for e-commerce trading systems. We divide user behaviors into four groups: web browsing behavior, keystroke behavior, network transaction behavior, and mobile terminal behavior. The performance and correlation analysis techniques of these methods are discussed and compared in detail. Finally, we provide ideas for future research involving behavior analysis for online trading systems.
24 July 2018 in IEEE Transactions on Systems, Man, and Cybernetics: Systems
This paper focuses on the behavior similarity of workflow nets (WF-nets). The similarity of two WF-nets reflects their consistent degree in behaviors. It explores the behavioral relations of subsets of transitions based on the interleaving semantics, and more accurate relations are defined than the existing work. Therefore, a more accurate similarity of two WF-nets (in their behaviors) can be obtained than that in the existing work that usually do not consider the loop and complex correspondence. By refining the interleaving relation in a behavioral profile into six types, this paper proposes the notion of a relation profile based on behavioral profile. Based on the relation profile of a WF-net, behavioral relation matrix can be constructed. Additionally, we refine the complex correspondence and generate a group of behavioral relation submatrices from the behavioral relation matrix. By using them we present a new formula to measure the behavior similarity of two WF-nets. Finally, examples illustrate that our method can measure the similarity degree more accurately.
21 August 2018 in IEEE Transactions on Systems, Man, and Cybernetics: Systems
The e-commerce business process net (EBPN) is a novel formal model for describing an e-commerce system and its interactive parts, such as shoppers, merchants, and the third-party payment platforms. Vulnerability analysis has a great impact on the trustworthiness of EBPN, which is an issue stemming from data inconsistency problems. Data inconsistency problems affect the consistency of the EBPN transaction analysis. The underlying causes of inconsistent data are closely related to concurrent operations, such as control flow and data flow. However, most of the existing detection methods have difficulties characterizing the vulnerabilities and interactions of control and data flows. In this paper, we propose a new method based on the dynamic data slice (DDS) that considers both transaction consistency and data state consistency. First, by analyzing control flow characteristics of EBPN, we obtain the dynamic slice. This dynamic slice is based on all paths of the EBPN reachability graph. Second, we perform the data inconsistency analysis by considering both transaction consistency and data-state consistency. Based on these, we construct a DDS to characterize the behavioral logic and the data-dependence information. The DDS acquires the dynamic data firing sequence. Based on that sequence and a given data marking, we can construct the DDSs for several types of EBPNs. Constructing the DDS can be completed in polynomial time. The DDS is designed to characterize the behavioral logic and data-dependence information. Based on these, we design a method to judge the data constraints. This method satisfies the EBPN need for transaction consistency by considering both the control and data states. In addition, according to the data-dependence information, we can lock the vulnerable regions caused by abnormal trading data in the system. Finally, we give a method to compute the vulnerability level.
1 November 2020 in IEEE/CAA Journal of Automatica Sinica