CLOSURE:用跨通道一致性改进多元时间序列异常检测
CLOSURE: Cross-Channel Closure for Multivariate Time Series Anomaly Detection
一篇时间序列异常检测的新论文,把重构误差之外加了一层通道间一致性判断,传感器漂移这类传统残差方法漏掉的情况能被抓住,做工业监控的可以看看。
来自 arXiv 的论文提出 CLOSURE 框架,将异常检测拆成两个独立任务:可恢复性和跨通道一致性。可恢复性任务由一个扩散重构器完成,其条件来自正常时间基底的离散记忆库。一致性任务由关系闭合算子实现,仅用其他通道预测每个通道,并通过稀疏符号门控决定参考哪些通道。两个分数只在正常数据上做校准后合并,实验显示 CLOSURE 在公开基准上稳定超过基于重构、频域和拓扑的检测器。
CLOSURE: Cross-Channel Closure for Multivariate Time Series Anomaly Detection
Multivariate time series produced by industrial installations and server clusters are under continuous monitoring, and anomaly detection is the first line of defense before a local fault escalates into a system-wide failure. In the absence of labels, the dominant paradigm trains a reconstruction model on normal data and scores the residual to reach a verdict. Recent work has steadily enriched the expressiveness of the recovery map through Transformers, diffusion models, and cross-scale associations. A residual, however, only certifies that an observation can be recovered; it does not certify that the variables still explain one another as they do under normal operation. A coordinated yet unfamiliar operating transition inflates the residual without breaking any relationship, whereas a sensor drifting away from its peers may leave the residual silent. Methods that fold inter-variable dependencies into the reconstruction objective inherit this ambiguity, because their relational evidence is ultimately supervised by the same recovery loss. We therefore propose CLOSURE, which evaluates recoverability and cross-channel consistency as two normal-data prediction tasks learned in separation. The recoverability task is solved by a diffusion reconstructor conditioned on a discrete memory of normal temporal bases. The consistency task is solved by a relation-closure operator that predicts every channel exclusively from the others, where the target's own trajectory is withheld and sparse signed gates decide which peers are actually used. The two scores are reconciled only through calibration on normal data. Extensive experiments show that CLOSURE consistently outperforms recent reconstruction-, frequency-, and topology-based detectors on public benchmark streams, confirming the value of examining consistency alongside recoverability.