This study forms temporal concept-incremental anomaly detection for both univariate and multivariate time series, introduces time-based and entity-based concept extraction strategies together with Wasserstein-distance diagnostics for inter- and intra-concept distribution drift, and defines an evaluation protocol that measures detection quality, knowledge retention, and energy consumption.
Abstract
While anomaly detection is essential for cloud computing and predictive maintenance, approaches that bridge continual learning with environmental sustainability remain largely unexplored. In production environments, evolving data distributions cause performance degradation of machine learning models, and naive adaptation may lead to forgetting of past patterns that are likely to reoccur. In this study, we formulate temporal concept-incremental anomaly detection for both univariate and multivariate time series. We introduce time-based and entity-based concept extraction strategies together with Wasserstein-distance diagnostics for inter- and intra-concept distribution drift, and define an evaluation protocol that measures detection quality, knowledge retention, and energy consumption. We further propose Selective Temporal Replay (STR), a replay strategy for autoencoder-based continual anomaly detection that combines diversity-based initialization, novelty-gated admission, retention-aware replacement, and age-weighted preservation of stored sequences. The empirical study comprises more than 5,400 experiments across four datasets, nine autoencoder architectures, and ten continual learning strategies. On Yahoo! A1, STR obtains the highest ROC-AUC in seven of the nine architectures and is the only strategy with positive backward transfer on all four datasets; under the smallest memory budgets, it obtains the highest ROC-AUC among replay methods on Yahoo! A1 and SMD. The sustainability analysis identifies when selective replay justifies its additional energy cost and when regularization-based continual learning strategies are preferable.
This study created and verified an adaptive machine learning framework that makes use of real-time model updates and domain-specific cloud infrastructure information and offers a deployable framework for improving cloud security in Kenya and other resource-constrained environments.
Milimo Moses Sibilike· International Journal Of Eng...· 0 citations
Within the limits of trace replay and controlled fault injection, these results suggest that closed-loop anomaly-aware scheduling can improve recovery timeliness and operational stability for gray-failure mitigation in cloud clusters.
Jun-Tao Ye, Yuan-Chen Sun, Di Wu et al.· Cluster Computing· 0 citations
Advanced Persistent Threats (APTs) are particularly challenging for enterprise intrusion detection because they are time-evolving, distributed, and difficult to detect under changing network conditions. Conventional machine-learning-based intrusion detection systems (IDSs) often rely on node-level features and may be v...
Bahar Memarpour, Kimia Memarpour, Kimia Shirini et al.· Technologies· 0 citations
Modern computer networks continuously change because of cloud services, IoT devices, mobile users, distributed applications, and evolving communication patterns. Conventional machine-learning intrusion detection systems are commonly trained on historical traffic and may degrade when traffic distributions or attack beha...
Kalyani R. Fande S. B. Bele, Sharayu S. Pathak Anandi D. Shelke· International Journal of Adv...· 0 citations
Zero-day cyberattacks remain difficult to detect because their behavioral characteristics are not represented in the data available during model training. In addition, intrusion detection models operating in dynamic environments are vulnerable to concept drift, while continual-learning approaches may suffer from catast...
Abdalilah Alhalangy, Galal Eldin Abbas Eltayeb· Information· 0 citations
This paper presents a systematic review and comparative analysis of state-of-the-art anomaly detection algorithms for streaming data - one of the fundamental problems in data mining, cybersecurity, and industrial monitoring. Unlike existing surveys, which mostly address the batch setting, all methods here are examined...
T. A. Konovalov, A. В. Gerasimov· Herald Of Technological Univ...· 0 citations
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.