REVIEW 4 cited by
Extended Isolation Forest
Not yet reviewed by Pith; the record is open.
This paper has not been read by Pith yet. Machine review is queued; the pith claim, tier, and objections will appear here once it completes.
SPECIMEN: schema-true, not a live event
T0 review · schema-true
One-sentence machine reading of the paper's core claim.
pith:XXXXXXXX · record.json · timestamp
Signed reviews
read the original abstract
We present an extension to the model-free anomaly detection algorithm, Isolation Forest. This extension, named Extended Isolation Forest (EIF), resolves issues with assignment of anomaly score to given data points. We motivate the problem using heat maps for anomaly scores. These maps suffer from artifacts generated by the criteria for branching operation of the binary tree. We explain this problem in detail and demonstrate the mechanism by which it occurs visually. We then propose two different approaches for improving the situation. First we propose transforming the data randomly before creation of each tree, which results in averaging out the bias. Second, which is the preferred way, is to allow the slicing of the data to use hyperplanes with random slopes. This approach results in remedying the artifact seen in the anomaly score heat maps. We show that the robustness of the algorithm is much improved using this method by looking at the variance of scores of data points distributed along constant level sets. We report AUROC and AUPRC for our synthetic datasets, along with real-world benchmark datasets. We find no appreciable difference in the rate of convergence nor in computation time between the standard Isolation Forest and EIF.
Forward citations
Cited by 4 Pith papers
-
PIF: Anomaly detection via preference embedding
PIF embeds points as preference vectors over random parametric models and isolates anomalies with a Voronoi-based isolation forest using the Tanimoto distance, outperforming LOF, IFOR, and EIFOR in the tested settings.
-
We Need to Rethink Benchmarking in Anomaly Detection
Evaluating anomaly detection by averaging over diverse datasets is misleading; the paper proposes scenario-based benchmarking organized by shared structural properties.
-
siForest: Detecting Network Anomalies with Set-Structured Isolation Forest
A set-partitioned Isolation Forest variant detects synthetic network scan anomalies at IP level, with best results on unusual port-service pairings but modest precision on volume spikes.
-
An empirical comparison of some outlier detection methods with longitudinal data
An empirical comparison of seven outlier detection methods on four panel datasets shows high rank agreement among scores, especially between isolation forest and the Hidiroglou-Berthelot score, but no external ground ...
Discussion (0). Continue with ORCID to comment.