A Scalable Framework for Unsupervised Outlier Detection (Anomaly Detection)
Project description
Deployment & Documentation & Stats
Build Status & Coverage & Maintainability & License
Background: Outlier detection (OD) is a key data mining task for identifying abnormal objects from general samples with numerous high-stake applications including fraud detection and intrusion detection. Due to the lack of ground truth labels, practitioners often have to build a large number of unsupervised models that are heterogeneous (i.e., different algorithms and hyperparameters) for further combination and analysis with ensemble learning, rather than relying on a single model. However, this yields severe scalability issues on high-dimensional, large datasets.
SUOD (Scalable Unsupervised Outlier Detection) is an acceleration framework for large-scale unsupervised heterogeneous outlier detector training and prediction. It focuses on three complementary aspects to accelerate (dimensionality reduction for high-dimensional data, model approximation for complex models, and execution efficiency improvement for taskload imbalance within distributed systems), while controlling detection performance degradation.
Since its inception in Sep 2019, SUOD has been successfully used in various academic researches and industry applications with more than 700,000 downloads, including PyOD [2] and IQVIA medical claim analysis.
SUOD is featured for:
Unified APIs, detailed documentation, and examples for the easy use.
Optimized performance with JIT and parallelization when possible, using numba and joblib.
Fully compatible with the models in PyOD.
Customizable modules and flexible design: each module may be turned on/off or totally replaced by custom functions.
Roadmap:
Provide more choices of distributed schedulers (adapted for SUOD), e.g., batch sampling, Sparrow (SOSP’13), Pigeon (SoCC’19) etc.
Enable the flexibility of selecting data projection methods.
API Demo:
from suod.models.base import SUOD # initialize a set of base outlier detectors to train and predict on base_estimators = [ LOF(n_neighbors=5, contamination=contamination), LOF(n_neighbors=15, contamination=contamination), LOF(n_neighbors=25, contamination=contamination), HBOS(contamination=contamination), PCA(contamination=contamination), OCSVM(contamination=contamination), KNN(n_neighbors=5, contamination=contamination), KNN(n_neighbors=15, contamination=contamination), KNN(n_neighbors=25, contamination=contamination)] # initialize a SUOD model with all features turned on model = SUOD(base_estimators=base_estimators, n_jobs=6, # number of workers rp_flag_global=True, # global flag for random projection bps_flag=True, # global flag for balanced parallel scheduling approx_flag_global=False, # global flag for model approximation contamination=contamination) model.fit(X_train) # fit all models with X model.approximate(X_train) # conduct model approximation if it is enabled predicted_labels = model.predict(X_test) # predict labels predicted_scores = model.decision_function(X_test) # predict scores predicted_probs = model.predict_proba(X_test) # predict outlying probability
The extended version (under submission at a major ML system conference) can be accessed here. A preliminary version (accepted at AAAI-20 Security Workshop) can be accessed on arxiv.
If you use SUOD in a scientific publication, we would appreciate citations to the following paper:
@inproceedings{zhao2020suod, author = {Zhao, Yue and Ding, Xueying and Yang, Jianing and Haoping Bai}, title = {{SUOD}: Toward Scalable Unsupervised Outlier Detection}, journal = {Workshops at the Thirty-Fourth AAAI Conference on Artificial Intelligence}, year = {2020} }
Yue Zhao, Xueying Ding, Jianing Yang, Haoping Bai, "Toward Scalable Unsupervised Outlier Detection". Workshops at the Thirty-Fourth AAAI Conference on Artificial Intelligence, 2020.
Table of Contents:
Installation
It is recommended to use pip for installation. Please make sure the latest version is installed, as suod is updated frequently:
pip install suod # normal install
pip install --upgrade suod # or update if needed
pip install --pre suod # or include pre-release version for new features
Alternatively, you could clone and run setup.py file:
git clone https://github.com/yzhao062/suod.git
cd suod
pip install .
Required Dependencies:
Python 3.5, 3.6, or 3.7
joblib
numpy>=1.13
pandas (optional for building the cost forecast model)
pyod
scipy>=0.19.1
scikit_learn>=0.19.1
Note on Python 2: The maintenance of Python 2.7 will be stopped by January 1, 2020 (see official announcement). To be consistent with the Python change and suod’s dependent libraries, e.g., scikit-learn, SUOD only supports Python 3.5+ and we encourage you to use Python 3.5 or newer for the latest functions and bug fixes. More information can be found at Moving to require Python 3.
API Cheatsheet & Reference
Full API Reference: (https://suod.readthedocs.io/en/latest/api.html).
fit(X, y): Fit estimator. y is optional for unsupervised methods.
approximate(X): Use supervised models to approximate unsupervised base detectors. Fit should be invoked first.
predict(X): Predict on a particular sample once the estimator is fitted.
predict_proba(X): Predict the probability of a sample belonging to each class once the estimator is fitted.
Examples
All three modules can be executed separately and the demo codes are in /examples/module_examples/{M1_RP, M2_BPS, and M3_PSA}. For instance, you could navigate to /M1_RP/demo_random_projection.py. Demo codes all start with “demo_*.py”.
The examples for the full framework can be found under /examples folder; run “demo_base.py” for a simplified example. Run “demo_full.py” for a full example.
It is noted the best performance may be achieved with multiple cores available.
More to come… Last updated on Dec 27th, 2020.
Feel free to star and watch for the future update :)
References
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.