One-Sided Synthetic-RZ control charts: a new method for anomaly detection

Anomaly detection is the identification of observations that deviates from the data set's normal behavioral patterns. It is an important problem that has been researched within diverse research areas and application domains such as intrusion detection, fraud detection, fault detection, and event detection in sensor networks. Among the anomaly detection methods, control charts have been considered important and critical. In this paper, we present a new method for anomaly detection based on one-sided Synthetic control charts monitoring the ratio of two normal variables in which both the steady-state and the zero-state average run length (ARL) are investigated. The numerical results show that our proposed control charts outperform the two-sided Synthetic control chart in detecting process shifts.

[1]  Kim Phuc Tran,et al.  On the performance of VSI Shewhart control chart for monitoring the coefficient of variation in the presence of measurement errors , 2019, The International Journal of Advanced Manufacturing Technology.

[2]  Andrej Blejec,et al.  distribution of the ratio of jointly normal variables , 2004, Advances in Methodology and Statistics.

[3]  Kim Phuc Tran,et al.  A data-driven approach for Network Intrusion Detection and Monitoring based on Kernel Null Space , 2019, EAI Endorsed Trans. Ind. Networks Intell. Syst..

[4]  J. C. Hayya,et al.  A Note on the Ratio of Two Normally Distributed Variables , 1975 .

[5]  William H. Woodall,et al.  Evaluating and Improving the Synthetic Control Chart , 2002 .

[6]  R. C. Geary The Frequency Distribution of the Quotient of Two Normal Variates , 2022 .

[7]  Giovanni Celano,et al.  Monitoring the Ratio of Two Normal Variables Using EWMA Type Control Charts , 2016, Qual. Reliab. Eng. Int..

[8]  E. Seneta,et al.  On Quasi-Stationary distributions in absorbing discrete-time finite Markov chains , 1965, Journal of Applied Probability.

[9]  Eugenio K. Epprecht,et al.  Synthetic control chart for monitoring the pprocess mean and variance , 2006 .

[10]  VARUN CHANDOLA,et al.  Anomaly detection: A survey , 2009, CSUR.

[11]  Kim Phuc Tran,et al.  Steady‐state ARL analysis of ARL‐unbiased EWMA‐RZ control chart monitoring the ratio of two normal variables , 2018, Qual. Reliab. Eng. Int..

[12]  Giovanni Celano,et al.  A Synthetic Control Chart for Monitoring the Ratio of Two Normal Variables , 2016, Qual. Reliab. Eng. Int..

[13]  Giovanni Celano,et al.  Monitoring the ratio of population means of a bivariate normal distribution using CUSUM type control charts , 2016, Statistical Papers.

[14]  Rassoul Noorossana,et al.  An overview of dynamic anomaly detection in social networks via control charts , 2018, Qual. Reliab. Eng. Int..

[15]  Cédric Heuchenne,et al.  Monitoring the ratio of two normal variables using variable sampling interval exponentially weighted moving average control charts , 2018, Qual. Reliab. Eng. Int..

[16]  Giovanni Celano,et al.  Design of a Phase II Control Chart for Monitoring the Ratio of two Normal Variables , 2016, Qual. Reliab. Eng. Int..

[17]  Giovanni Celano,et al.  Monitoring the ratio of two normal variables using Run Rules type control charts , 2016 .