Fake it till you detect it : Continual anomaly detection in multivariate time-series using generative AI.

García González, Gastón - Casas, Pedro - Fernández, Alicia

Resumen:

Anomaly detection in Multivariate Time-Series (MTS) data plays an important role in multiple domains, especially in cybersecurity, for the detection of unknown attacks. DC-VAE is a recent approach we have proposed for anomaly detection in network measurement multivariate data, which uses Variational Auto Encoders (VAEs) and Dilated Convolutional Neural Networks (DCNNs) to model complex and high-dimensional MTS data. However, detecting anomalies using VAEs can result in performance degradation and even catastrophic forgetting when trained on dynamic and evolving network measurements, particularly in the event of concept drifts. We extend DC-VAE to a continual learning setup, leveraging the generative AI properties of the underlying models to deal with continually evolving data. We introduce GenDeX, an approach to Generative AI-based anomaly detection which compresses the patterns extracted from past measurements into a generative model that can synthesize MTS data out of input Gaussian noise, mimicking the characteristics of the MTS data used for training. GenDeX relies on a Deep Generative Replay paradigm to realize continual learning, combining synthesized past MTS measurements with new observations to update the detection model. Using a large-scale, multi-dimensional network monitoring dataset collected from an operational mobile Internet Service Provider (ISP), we showcase the functionality of DC-VAE in the event of concept drifts, and study in-depth its generative characteristics, assessing GenDeX synthetically generated MTS examples. GenDeX enables DC-VAE adapting to continually evolving data, overcoming the limitations of catastrophic forgetting.


Detalles Bibliográficos
2023
Austrian FFG ICT-of-the-Future project DynAISEC – Adaptive AI/ML for Dynamic Cybersecurity Systems
FMV-1-2019-1-155850
Beca ANII POS-FMV-2020-1-1009239
CSIC, bajo programa Movilidad e Intercambios Académicos 2022
Anomaly detection
Generative AI
VAE
Multivariate time-series
GenDeX
Inglés
Universidad de la República
COLIBRI
https://hdl.handle.net/20.500.12008/38504
Acceso abierto
Licencia Creative Commons Atribución - No Comercial - Sin Derivadas (CC - By-NC-ND 4.0)
Resumen:
Sumario:Presentado y publicado en 2023 IEEE European Symposium on Security and Privacy Workshops (EuroS&PW), Delft, Netherlands, 3-7 jul 2023, pp 558-566