12
1 Page Number www.anodot.com |Confidential Eliminating Insight Latencies… One Anomaly at a Time Ira Cohen, Chief Data Scientist [email protected]

Five key learnings from building a large scale anomaly detection system

Embed Size (px)

Citation preview

Page 1: Five key learnings from building a large scale anomaly detection system

1Page Numberwww.anodot.com |Confidential

Eliminating Insight Latencies…One Anomaly at a Time

Ira Cohen, Chief Data [email protected]

Page 2: Five key learnings from building a large scale anomaly detection system

2Page Numberwww.anodot.com |Confidential

What is the problem?

Business Insight Latency

Delayed business insights cost companies millions of dollars

Page 3: Five key learnings from building a large scale anomaly detection system

3Page Numberwww.anodot.com |Confidential

Business insights at any granularity

Publishers Ad exchanges DevicesConversion Ad types X XX

User types Countries RegionPurchases Item categories X XX

OS Browsers Software verPage views Pages X XX

Sheet type Locations CustomerPrint errors Printer type X XX

Measuring KPIs with many dimensions

Millions of time series metrics to track

Page 4: Five key learnings from building a large scale anomaly detection system

4Page Numberwww.anodot.com |Confidential

How to Track the Millions and Get the Insights?

Automated Anomaly Detection

Aggregate, Detect and Group

Page 5: Five key learnings from building a large scale anomaly detection system

5Page Numberwww.anodot.com |Confidential

Realtime Anomaly Detection: Design Principals

• Collect metrics from ANY source Universal• Realtime tracking of millions of metricsScale• Unique IP for anomaly detection that eliminates FP Accurate• Multivariate anomalies for swift problem isolation Concise

Page 6: Five key learnings from building a large scale anomaly detection system

6Page Numberwww.anodot.com |Confidential

Automatic Anomaly Detection in Five Steps

Normal behavior learning

Abnormal behavior learning

Behavioral Topology Learning

Detection, scoring and grouping anomalies

Feedback based learning

Page 7: Five key learnings from building a large scale anomaly detection system

7Page Numberwww.anodot.com |Confidential

Automatic Anomaly Detection in Five Steps

Normal behavior learning

- Adaptive- Detects and learns seasonal patterns + trends- Auto-configuration- Model selection algorithm

Page 8: Five key learnings from building a large scale anomaly detection system

8Page Numberwww.anodot.com |Confidential

Automatic Anomaly Detection in Five Steps

P(Anomaly | Duration, Deviation)

Bayesian model combining statistics of:- Abnormal durations- Abnormal intensity- Abnormal pattern

Abnormal behavior learning

Page 9: Five key learnings from building a large scale anomaly detection system

9Page Numberwww.anodot.com |Confidential

Automatic Anomaly Detection in Five Steps

- Normal behavior relationship learning- Abnormal behavior relationship learning- Meta-data based relationship learning

Behavioral Topology Learning

Page 10: Five key learnings from building a large scale anomaly detection system

10Page Numberwww.anodot.com |Confidential

Automatic Anomaly Detection in Five Steps

Detection, scoring and grouping anomalies

Feedback based learning

90

Page 11: Five key learnings from building a large scale anomaly detection system

11Page Numberwww.anodot.com |Confidential

Anodot - Summary

• Founded June 2014• Beta since Jan 2015, GA in Sep• Over 20 million metrics tracked• Over 12,000 real-time insights provided to over 200 users • To try us out, contact: [email protected]• Follow us on twitter: @TeamAnodot

Page 12: Five key learnings from building a large scale anomaly detection system

12Page Numberwww.anodot.com |Confidential

THANK [email protected]@TeamAnodot