Preprint
Machine Learning

Deep Learning for Time Series Anomaly Detection: A Survey

Zahra Zamanzadeh Darban(Monash University), Geoffrey I. Webb(Monash University), Shirui Pan(Griffith University), Charų C. Aggarwal(IBM Research - Thomas J. Watson Research Center), Mahsa Salehi(Monash University)
August 30, 2024ACM Computing Surveys646 citations

646

Citations

16

Influential Citations

ACM Computing Surveys

Venue

2024

Year

Abstract

Time series anomaly detection is important for a wide range of research fields and applications, including financial markets, economics, earth sciences, manufacturing, and healthcare. The presence of anomalies can indicate novel or unexpected events, such as production faults, system defects, and heart palpitations, and is therefore of particular interest. The large size and complexity of patterns in time series data have led researchers to develop specialised deep learning models for detecting anomalous patterns. This survey provides a structured and comprehensive overview of state-of-the-art deep learning for time series anomaly detection. It provides a taxonomy based on anomaly detection strategies and deep learning models. Aside from describing the basic anomaly detection techniques in each category, their advantages and limitations are also discussed. Furthermore, this study includes examples of deep anomaly detection in time series across various application domains in recent years. Finally, it summarises open issues in research and challenges faced while adopting deep anomaly detection models to time series data.

Analysis

Why This Paper Matters

Time series anomaly detection is critical across many high-stakes domains such as finance, healthcare, and industrial monitoring. The increasing volume and complexity of time series data have made traditional statistical methods insufficient, driving the need for deep learning approaches. This survey provides a timely and structured overview of the rapidly growing field, helping researchers and practitioners navigate the diverse landscape of models and techniques. By organizing methods into a clear taxonomy, the paper enables readers to quickly identify relevant approaches and understand their relative strengths and weaknesses.

Technical Contributions

The paper's main contribution is its comprehensive taxonomy that categorizes deep anomaly detection methods along two dimensions: anomaly detection strategy (e.g., reconstruction-based, forecasting-based, distance-based) and deep learning model type (e.g., autoencoders, RNNs, CNNs, GANs, transformers). For each category, the authors discuss the underlying principles, typical architectures, and key advantages and limitations. The survey also includes a section on application domains, illustrating how different methods are deployed in practice. This structured approach makes it easier to compare methods and identify suitable techniques for specific problems.

Results

As a survey paper, it does not present new experimental results. Instead, it synthesizes findings from over 600 cited works, summarizing reported performance metrics such as precision, recall, F1-score, and AUC on benchmark datasets like Yahoo S5, NAB, and UCR. The paper highlights that reconstruction-based methods (e.g., autoencoders) are widely used but may struggle with point anomalies, while forecasting-based methods (e.g., LSTM predictors) are effective for contextual anomalies. It also notes that hybrid and ensemble approaches often achieve state-of-the-art results.

Significance

This survey provides a foundational reference for the AI community, consolidating a fragmented research area into a coherent framework. By identifying open issues such as handling high-dimensional data, concept drift, and lack of labeled anomalies, it sets a clear agenda for future research. Practitioners can use the taxonomy to select appropriate methods for their applications, while researchers can build upon the identified gaps. The paper's high citation count (646) underscores its impact and utility in guiding the development of more robust and scalable anomaly detection systems.