Are Anomaly Scores Telling the Whole Story? A Benchmark for Multilevel Anomaly Detection
Tri Cao, Minh-Huy Trinh, Ailin Deng, Quoc-Nam Nguyen, Khoa Duong,, Ngai-Man Cheung, Bryan Hooi

TL;DR
This paper introduces Multilevel Anomaly Detection (MAD), a new setting and benchmark for evaluating how well anomaly scores reflect severity, addressing limitations of traditional binary anomaly detection models.
Contribution
The paper proposes MAD, a multilevel AD setting, and MAD-Bench, a benchmark for evaluating severity-aware anomaly detection models, along with a comprehensive performance analysis.
Findings
Models vary in their ability to assign severity-aligned scores
Binary detection performance does not always correlate with severity detection
Robustness of models varies across different severity levels
Abstract
Anomaly detection (AD) is a machine learning task that identifies anomalies by learning patterns from normal training data. In many real-world scenarios, anomalies vary in severity, from minor anomalies with little risk to severe abnormalities requiring immediate attention. However, existing models primarily operate in a binary setting, and the anomaly scores they produce are usually based on the deviation of data points from normal data, which may not accurately reflect practical severity. In this paper, we address this gap by making three key contributions. First, we propose a novel setting, Multilevel AD (MAD), in which the anomaly score represents the severity of anomalies in real-world applications, and we highlight its diverse applications across various domains. Second, we introduce a novel benchmark, MAD-Bench, that evaluates models not only on their ability to detect anomalies,…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Code & Models
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsAnomaly Detection Techniques and Applications · Network Security and Intrusion Detection · COVID-19 epidemiological studies
