RATFM: Retrieval-augmented Time Series Foundation Model for Anomaly Detection
Chihiro Maru, Shoetsu Sato

TL;DR
This paper introduces RATFM, a retrieval-augmented model for time series anomaly detection that adapts at test time using examples without domain-specific fine-tuning, achieving high performance across multiple domains.
Contribution
The paper proposes RATFM, a novel retrieval-augmented framework that enables pretrained time series models to incorporate test-time examples for anomaly detection without domain-specific fine-tuning.
Findings
RATFM performs comparably to in-domain fine-tuning methods.
It effectively utilizes test-time examples for anomaly detection.
Validated on the multi-domain UCR Anomaly Archive dataset.
Abstract
Inspired by the success of large language models (LLMs) in natural language processing, recent research has explored the building of time series foundation models and applied them to tasks such as forecasting, classification, and anomaly detection. However, their performances vary between different domains and tasks. In LLM-based approaches, test-time adaptation using example-based prompting has become common, owing to the high cost of retraining. In the context of anomaly detection, which is the focus of this study, providing normal examples from the target domain can also be effective. However, time series foundation models do not naturally acquire the ability to interpret or utilize examples or instructions, because the nature of time series data used during training does not encourage such capabilities. To address this limitation, we propose a retrieval augmented time series…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsAnomaly Detection Techniques and Applications · Time Series Analysis and Forecasting · Network Security and Intrusion Detection
