Scalable temporal anomaly causality discovery in large systems: achieving computational efficiency with binary anomaly flag data.
Saved in:
| Title: | Scalable temporal anomaly causality discovery in large systems: achieving computational efficiency with binary anomaly flag data. |
|---|---|
| Authors: | Asres, Mulugeta Weldezgina1 (AUTHOR) mulugetawa@uia.no, Omlin, Christian Walter1 (AUTHOR) christian.omlin@uia.no |
| Source: | European Physical Journal C -- Particles & Fields. May2026, Vol. 86 Issue 5, p1-26. 26p. |
| Subjects: | Causal models, Large scale systems, Causal inference, Optimization algorithms, Sensor networks |
| Abstract: | Extracting anomaly causality facilitates diagnostics once monitoring systems detect system faults. Identifying anomaly causes in large systems involves investigating a broader set of monitoring variables across multiple subsystems. However, learning graphical causal models (GCMs) comes with a significant computational burden that restrains the applicability of most existing methods in real-time and large-scale deployments. In addition, modern monitoring applications for large systems often generate large amounts of binary alarm flags, and the distinct characteristics of binary anomaly data—the meaning of state transition and data sparsity—challenge existing causality learning mechanisms. This study proposes an anomaly causal discovery approach (AnomalyCD), addressing the accuracy and computational challenges of generating GCMs from temporal binary flag datasets. The AnomalyCD presents several strategies, such as anomaly data-aware causality testing, sparse data and prior link compression, and edge pruning adjustment approaches. We validate the performance of the approach on two datasets: monitoring sensor data from the readout-box system of the Compact Muon Solenoid experiment at CERN, and a public dataset from an information technology monitoring system. The results on temporal GCMs demonstrate a considerable reduction of computation overhead and a moderate enhancement of accuracy on the binary anomaly datasets. Source code: https://github.com/muleina/AnomalyCD [ABSTRACT FROM AUTHOR] |
| Copyright of European Physical Journal C -- Particles & Fields is the property of Springer Nature and its content may not be copied or emailed to multiple sites without the copyright holder's express written permission. Additionally, content may not be used with any artificial intelligence tools or machine learning technologies. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.) | |
| Database: | Engineering Source |
|
Full text is not displayed to guests.
Login for full access.
|
|
| Abstract: | Extracting anomaly causality facilitates diagnostics once monitoring systems detect system faults. Identifying anomaly causes in large systems involves investigating a broader set of monitoring variables across multiple subsystems. However, learning graphical causal models (GCMs) comes with a significant computational burden that restrains the applicability of most existing methods in real-time and large-scale deployments. In addition, modern monitoring applications for large systems often generate large amounts of binary alarm flags, and the distinct characteristics of binary anomaly data—the meaning of state transition and data sparsity—challenge existing causality learning mechanisms. This study proposes an anomaly causal discovery approach (AnomalyCD), addressing the accuracy and computational challenges of generating GCMs from temporal binary flag datasets. The AnomalyCD presents several strategies, such as anomaly data-aware causality testing, sparse data and prior link compression, and edge pruning adjustment approaches. We validate the performance of the approach on two datasets: monitoring sensor data from the readout-box system of the Compact Muon Solenoid experiment at CERN, and a public dataset from an information technology monitoring system. The results on temporal GCMs demonstrate a considerable reduction of computation overhead and a moderate enhancement of accuracy on the binary anomaly datasets. Source code: https://github.com/muleina/AnomalyCD [ABSTRACT FROM AUTHOR] |
|---|---|
| ISSN: | 14346044 |
| DOI: | 10.1140/epjc/s10052-026-15611-5 |
