Oracle Corporation
Univariate Anomaly Detection in a Sensor Network

Abstract:

Embodiments determine anomalies in sensor data generated by a sensor by receiving an evaluation time window of clean sensor data generated by the sensor. Embodiments receive a threshold value for determining anomalies. When the clean sensor data has a cyclic pattern, embodiments divide the evaluation time window into a plurality of segments of equal length, wherein each equal length comprises the cyclic pattern. When the clean sensor data does not have the cyclic pattern, embodiments divide the evaluation time window into a pre-defined number of plurality of segments of equal length. Embodiments convert the evaluation time window and each of the plurality of segments into corresponding curves using Kernel Density Estimation ("KDE"). For each of the plurality of segments, embodiments determine a Kullback-Leibler ("KL") divergence value between corresponding curves of the segment and the evaluation time window to generate a plurality of KL divergence values.