Anomaly/change detection hackathon proposal

ANNOUNCEMENT 

Objective: The goal of this hackathon is to identify change points and/or anomalies within a provided time-stamped dataset. This analysis will reveal distinct phases and patterns within the data.

Tools and Methods:

• Participants are encouraged to utilize any tools, libraries, or packages (e.g., R, Python) for change point and anomaly detection.

• Alternatively, participants can use the free Change Point Detection API via Postman (postman.com), as detailed below.

Resources:

• Change Point Detection API: Implemented in the free web tool Perfomalist: https://www.trub.in/2020/08/cpd-change-points-detection-is-planed.html 

• API Instructions: How to use the Change Points Detection Perfomalist  API: https://www.trutechdev.com/2021/11/the-change-points-detection-perfomalapi.html 

Hackathon Details:

• Time Limit: 3 hours to complete the task.

• Judging: CMG experts will evaluate the results.

• Award: The winner will receive an award and the opportunity for a short presentation.

• Vendor Participation: Vendors of similar tools are welcome to participate.

Visualization:

• Results can be visualized using spreadsheet charting tools (Excel, Google Sheets) or other methods (e.g., Python, R).

• Examples of visualizations will be provided below:

• 

"Detecting Past and Future Change Points in Performance Data" - research paper preprint

Our research paper was accepted for ORAL PRESENTATION at ICTDsC 2024 in India.

We were not able to go there and plan to publish that later at another place. The abstract is below.

And the paper itself could be found as a preprint at our google drive HERE

Perfomalist team is presenting at www.CMGimpact.com international conference in Orlando.

PRODUCT: www.Perfomalist.com

www.CMGimpact.com

LinkedIn Post

ABSTRACT: The MASF/SETDS method of detecting changes and anomalies in performance data, its recent implementation and the way to use and interpret the results will be presented with real examples against MangoDB testing data.

 

Since 1995, a time when the CMG conference published a very influential paper about the MASF method of anomaly detection, this topic has been increasingly more popular in the area of Capacity and Performance management. The modification of the MASF – SETDS method – was introduced in the 2002 CMG best paper and then got implemented in several companies and applications. This included the CMG online class “Perfomalies (Performance Anomaly) Detection”. Most recently this method has been turned into the cloud based serverless API microservice which is available for free via “Perfomalist” web app. The Perfomalist change points detection API was used against MongoDB’s testing data and got acceptable results which were published in the SPEC.org 2022 conference. This paper included an additional post-processing algorithm (XGBoost) to eliminate false positives which is planned to be added to Perfomalist service.

The paper about using #Perfomalist "Change Point Detection for #MongoDB Time Series Performance Regression" was cited...

The paper about using #Perfomalist "Change Point Detection for #MongoDB Time Series Performance Regression" was cited in the following paper: "Estimating Breakpoints in Piecewise Linear Regression Using #MachineLearning Methods", where our method was mentioned as " … offer a hybrid change point detection system..." 

#ChangeDetection for #MongoDB Time Series Performance Regression (#Perfomalist API usage example)

Perfomalist #ChangeDetection API was used against #MongoDB #perfomanceTesting dataset

We are participating in the data challenge for icpe2022.spec.org conference.

The challenge dataset is provided by MongoDB.

Initially some small part of the data was used to prove that Perfomalist CPD API can be used. 

Data looks like a big data cube with numerous dimensional variables and two factual ones (datetime and value). I took one case with a particular slice of this cube and processed that (datetime-value) by calling the Perfomalist API. The result I have plotted using Excel and can be seen in the following  picture. 

IDEA: Potentially some program could be developed to call the CPD API  (i.e.,  Perfomalist) for every data cube slice and to collect change points in a separate table like in the 2nd picture below:

That (meta-) data then should be correlated with events happening (or not happening) around any change dates detected, e.g., feature flag tuned on/off (that data is hidden from us so far). The result should help to explain each change. Additionally, to measure the magnitude of the change I would suggest calculating the entropy based imbalance of the data between changes (see my last paper how to do that). For example, that could tell how stable or not stable performance had become after particular change. 

After my 1st initial Peorfomalist usage, more rigorous usage was done against MongoDB dataset, based on which the following paper was written and accepted for data challenge track of the conference:

"Change Point Detection for MongoDB Time Series Performance Regression" paper for ACM/SPEC ICPE 2022 Data Challenge Track

The paper about Perfomalist #ChangeDetection API is accepted for ACM/SPEC ICPE 2022 Data Challenge Track

"Change Point Detection (#ChangeDetection) for MongoDB Time Series Performance Regression" paper for ACM/SPEC ICPE 2022 Data Challenge Track

Perfomalist Release Notes

- Perfomalist 1.1. has now the Change Point Detection API as described in the previous post:

The Change Points Detection Perfomalist API beta version is released. 

Contributors:  Arvid Trubin, 

Filipp Trubin

  

- Perfomalist 1.2. has additional two columns in the table view of the weekly profile to underline two types of anomalies the tool detects: 

    High Anomaly - Unusual high data value for particular hour calculated as Actual - UCL95 (only positive values of the subtraction is populated and represents EV+ which is Exception Value/significance of the anomaly) 

    Low Anomaly - Unusual low data value for particular hour calculated as UCL5 - Actual (only positive values of the subtraction is populated and represents EV- which is Exception Value /significance of the anomaly) 

If the value of Low or/and High Anomaly is "0" the particular hour does not have any anomalies. 

The number of anomalous week hours also counted and printed at the header of the columns in "()".

Contributor: Michael Berdichevsky

Perfomalist is referenced in the following published at Springler paper:

LINK to paper:  https://www.trub.in/2022/01/performance-anomaly-and-change-point.html 

Intelligent Sustainable Systems pp 403-407| Cite as

Performance Anomaly and Change Point Detection for Large-Scale System Management

Perfomalist

Perfomalist (www.Perfomalist.com) is a web based anomaly and change point detection tool. The method used by the tool is SETDS - Statistical Exception and Trend Detection System, which is a variation of the Statistical Process Control method applied to time series data. The key idea of the method is EV (Exception Value) which indicates the severity of anomalies calculated as a difference between control limits and actual anomalous data points. Any change that occurs first would appear as an anomaly and then may become a normality (new norm), so collecting overtime and analyzing the severity of all anomalies opens the possibility to find phases in the data history with different patterns. To detect change points between phases one just needs to find all the roots of the following equation:  EV(t)=0 , where t is time. [1]. Using this method the Perfomalist API call returns all change points found in the input CSV data.

[1] - Igor Trubin, "Exception Based Modeling and Forecasting" , 34th International Computer Measurement Group Conference, December 7-12, 2008, Las Vegas, Nevada, USA, Proceedings

Interesting case of Perfomalist usage

 

Dynamics of Anomalies or Phases in a Dynamic Object Life