{"title":"VAHMSE:一种基于变分自编码器和异构多堆叠集成学习的高效异常检测模型","authors":"Rui Wang, Jiayao Li","doi":"10.1007/s10489-025-06845-z","DOIUrl":null,"url":null,"abstract":"<div><p>With the advent of the information age, data has become an important resource and production factor. However, the existence of abnormal data causes the lose of personal privacy, business operations and national security, therefore, anomaly detection has received increasing attention in recent years. Most existing anomaly detection models are based on machine learning or deep learning models, but the use of a single model leads to the problems such as overfitting, weak generalization and poor stability. Meanwhile, there is a serious data imbalance problem due to the significantly few number of abnormal data compared to normal data, which reduces the detection performance. To address these issues, this paper proposes an anomaly detection model called VAHMSE based on <i>v</i>ariational <i>a</i>utoencoder and <i>h</i>eterogeneous <i>m</i>ulti-<i>s</i>tacking <i>e</i>nsemble learning to improve the detection performance. In the data augmentation phase, the <i>v</i>ariational <i>a</i>uto<i>e</i>ncoder (VAE) is used to replace traditional oversampling and other class balancing techniques to solve the data imbalance problem, and the mutual information is added to the loss function of traditional VAE to solve the problem of posterior distribution collapsing to prior distribution, thereby improving the quality of data generation. In the anomaly detection phase, the heterogeneous multi-stacking ensemble learning-based anomaly detection method is proposed, where five machine learning models with good performance are selected as the base learners in the first layer stacking process, and the TCN is selected as the meta learner in the second layer stacking process; In addition, the Squeeze and Excitation module is integrated into the traditional TCN model to explicitly model the interdependence between convolutional feature channels and improve the representation ability of network. Extensive experiments on six widely used datasets show that compared with five state-of-the-art models, the proposed VAHMSE achieves better performance in accuracy, recall, precision and F1-score, and it also achieves better stability.</p></div>","PeriodicalId":8041,"journal":{"name":"Applied Intelligence","volume":"55 13","pages":""},"PeriodicalIF":3.5000,"publicationDate":"2025-08-30","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":"{\"title\":\"VAHMSE: an efficient anomaly detection model based on variational autoencoder and heterogeneous multi-stacking ensemble learning\",\"authors\":\"Rui Wang, Jiayao Li\",\"doi\":\"10.1007/s10489-025-06845-z\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"<div><p>With the advent of the information age, data has become an important resource and production factor. However, the existence of abnormal data causes the lose of personal privacy, business operations and national security, therefore, anomaly detection has received increasing attention in recent years. Most existing anomaly detection models are based on machine learning or deep learning models, but the use of a single model leads to the problems such as overfitting, weak generalization and poor stability. Meanwhile, there is a serious data imbalance problem due to the significantly few number of abnormal data compared to normal data, which reduces the detection performance. To address these issues, this paper proposes an anomaly detection model called VAHMSE based on <i>v</i>ariational <i>a</i>utoencoder and <i>h</i>eterogeneous <i>m</i>ulti-<i>s</i>tacking <i>e</i>nsemble learning to improve the detection performance. In the data augmentation phase, the <i>v</i>ariational <i>a</i>uto<i>e</i>ncoder (VAE) is used to replace traditional oversampling and other class balancing techniques to solve the data imbalance problem, and the mutual information is added to the loss function of traditional VAE to solve the problem of posterior distribution collapsing to prior distribution, thereby improving the quality of data generation. In the anomaly detection phase, the heterogeneous multi-stacking ensemble learning-based anomaly detection method is proposed, where five machine learning models with good performance are selected as the base learners in the first layer stacking process, and the TCN is selected as the meta learner in the second layer stacking process; In addition, the Squeeze and Excitation module is integrated into the traditional TCN model to explicitly model the interdependence between convolutional feature channels and improve the representation ability of network. Extensive experiments on six widely used datasets show that compared with five state-of-the-art models, the proposed VAHMSE achieves better performance in accuracy, recall, precision and F1-score, and it also achieves better stability.</p></div>\",\"PeriodicalId\":8041,\"journal\":{\"name\":\"Applied Intelligence\",\"volume\":\"55 13\",\"pages\":\"\"},\"PeriodicalIF\":3.5000,\"publicationDate\":\"2025-08-30\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"0\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"Applied Intelligence\",\"FirstCategoryId\":\"94\",\"ListUrlMain\":\"https://link.springer.com/article/10.1007/s10489-025-06845-z\",\"RegionNum\":2,\"RegionCategory\":\"计算机科学\",\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"Q2\",\"JCRName\":\"COMPUTER SCIENCE, ARTIFICIAL INTELLIGENCE\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"Applied Intelligence","FirstCategoryId":"94","ListUrlMain":"https://link.springer.com/article/10.1007/s10489-025-06845-z","RegionNum":2,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"Q2","JCRName":"COMPUTER SCIENCE, ARTIFICIAL INTELLIGENCE","Score":null,"Total":0}
引用次数: 0
摘要
随着信息时代的到来,数据已经成为重要的资源和生产要素。然而,异常数据的存在会造成个人隐私、企业运营和国家安全的损失,因此,异常检测近年来越来越受到重视。现有的异常检测模型大多基于机器学习或深度学习模型,但单一模型的使用会导致过拟合、泛化弱、稳定性差等问题。同时,由于异常数据数量明显少于正常数据,存在严重的数据不平衡问题,降低了检测性能。针对这些问题,本文提出了一种基于变分自编码器和异构多堆叠集成学习的VAHMSE异常检测模型,以提高检测性能。在数据增强阶段,采用变分自编码器(VAE)代替传统的过采样等类平衡技术解决数据不平衡问题,并在传统VAE的损失函数中加入互信息,解决后验分布向先验分布坍缩的问题,从而提高数据生成的质量。在异常检测阶段,提出了基于异构多堆叠集成学习的异常检测方法,在第一层堆叠过程中选择5个性能较好的机器学习模型作为基础学习器,在第二层堆叠过程中选择TCN作为元学习器;此外,将Squeeze and Excitation模块集成到传统的TCN模型中,对卷积特征通道之间的相互依赖关系进行显式建模,提高了网络的表示能力。在6个广泛使用的数据集上进行的大量实验表明,与5个最先进的模型相比,所提出的VAHMSE在正确率、查全率、精密度和f1分数方面都有更好的表现,并且具有更好的稳定性。
VAHMSE: an efficient anomaly detection model based on variational autoencoder and heterogeneous multi-stacking ensemble learning
With the advent of the information age, data has become an important resource and production factor. However, the existence of abnormal data causes the lose of personal privacy, business operations and national security, therefore, anomaly detection has received increasing attention in recent years. Most existing anomaly detection models are based on machine learning or deep learning models, but the use of a single model leads to the problems such as overfitting, weak generalization and poor stability. Meanwhile, there is a serious data imbalance problem due to the significantly few number of abnormal data compared to normal data, which reduces the detection performance. To address these issues, this paper proposes an anomaly detection model called VAHMSE based on variational autoencoder and heterogeneous multi-stacking ensemble learning to improve the detection performance. In the data augmentation phase, the variational autoencoder (VAE) is used to replace traditional oversampling and other class balancing techniques to solve the data imbalance problem, and the mutual information is added to the loss function of traditional VAE to solve the problem of posterior distribution collapsing to prior distribution, thereby improving the quality of data generation. In the anomaly detection phase, the heterogeneous multi-stacking ensemble learning-based anomaly detection method is proposed, where five machine learning models with good performance are selected as the base learners in the first layer stacking process, and the TCN is selected as the meta learner in the second layer stacking process; In addition, the Squeeze and Excitation module is integrated into the traditional TCN model to explicitly model the interdependence between convolutional feature channels and improve the representation ability of network. Extensive experiments on six widely used datasets show that compared with five state-of-the-art models, the proposed VAHMSE achieves better performance in accuracy, recall, precision and F1-score, and it also achieves better stability.
期刊介绍:
With a focus on research in artificial intelligence and neural networks, this journal addresses issues involving solutions of real-life manufacturing, defense, management, government and industrial problems which are too complex to be solved through conventional approaches and require the simulation of intelligent thought processes, heuristics, applications of knowledge, and distributed and parallel processing. The integration of these multiple approaches in solving complex problems is of particular importance.
The journal presents new and original research and technological developments, addressing real and complex issues applicable to difficult problems. It provides a medium for exchanging scientific research and technological achievements accomplished by the international community.