Summary Notes for Anomaly Detection

 Finding unusual events:



Gaussian (Normal) Distribution:



Anomaly detection algorithm:







Developing and evaluating an anomaly detection system:




Anomaly detection v.s. Supervised learning






Anomaly detection is designed to identify novel positive instances that may not resemble any previously observed examples. In contrast, supervised learning uses known positive examples to determine whether future instances are similar to what has been seen before.

When building an anomaly detection algorithm, choosing what features to use ?

Non-gaussian features






The typical development process involves training the model, then reviewing the anomalies in the cross-validation set that the algorithm fails to detect. By examining these missed examples, you can identify potential new features. For instance, if an anomaly exhibits unusually high or low values on a newly engineered feature, that feature can help the algorithm successfully flag similar anomalies.

Comments

Popular posts from this blog

Analysis of Repeated Measures Data using SAS

Four essential statistical functions for simulation in SAS

Medical information for Melanoma, Merkel cell carcinoma and tumor mutation burden