用工具推理的智能体框架,让时序异常检测更准更懂上下文。
AnomaMind: Agentic Time Series Anomaly Detection with Tool-Augmented Reasoning
- 将异常检测转为分步决策流程,先定位可疑区间再生成诊断证据。
- 跨域测试中性能显著提升,对复杂模式和分布变化更具鲁棒性。
- 适合需要可解释性与高精度的工业监控、金融风控场景。
时序异常检测在众多实际应用中至关重要,有效方法需能精确定位异常区域,并在复杂环境下支持可靠决策。然而,现有方法多将异常检测视为固定特征表示的判别任务,而非基于证据的诊断过程,因此在异常具有强上下文依赖性、模式多样或数据集间存在领域偏移时表现不佳。为此,我们提出 AnomaMind,一个将异常检测重构为序列决策过程的智能体框架。该框架采用粗到细的工作流:首先定位可疑时间段,再通过工具交互构建诊断证据,最后经自省优化异常判断。其工具箱结合知识记忆与数值诊断:从训练数据中挖掘的视觉异常模式和领域知识提供上下文指导,统计、值域、变化量及区域级算子则提供可度量的验证依据。AnomaMind 还采用混合推理机制,通用模型负责灵活推理与工具调用,检测专用策略则通过规则奖励优化输出可解析性、F1 分数对齐与误报控制。在同域与跨域设置下的大量实验表明,AnomaMind 持续提升检测性能并增强对异构异常模式的泛化能力,验证了工具增强推理在异常检测中的有效性。代码已公开于 https://github.com/Xiaoyu-Tao/AnomaMind-TS。
原文摘要 · Abstract (English)
Time series anomaly detection is critical in many real-world applications, where effective solutions must localize anomalous regions and support reliable decision-making under complex settings. However, most existing methods frame anomaly detection as a purely discriminative prediction task with fixed feature representations, rather than an evidence-driven diagnostic process. As a result, they often struggle when anomalies exhibit strong context dependence, diverse patterns, or domain shifts across datasets. To address these challenges, we propose AnomaMind, an agentic time series anomaly detection framework that reformulates anomaly detection as a sequential decision-making process. AnomaMind operates through a coarse-to-fine workflow that first localizes suspicious intervals, then constructs diagnostic evidence through tool interaction, and finally refines anomaly decisions through self-reflection. The workflow is supported by a toolkit box that combines knowledge memory and numerical diagnostics: visual anomaly patterns mined from training data and domain knowledge provide contextual guidance, while statistical, value-based, change-based, and region-level operators provide measurable evidence for verification. AnomaMind further adopts a hybrid inference mechanism in which general-purpose models handle flexible reasoning, tool invocation, and refinement, while a detection-specific policy is optimized with rule-based rewards for parsable outputs, F1-score alignment, and false-positive control. Extensive experiments under both in-domain and cross-domain settings demonstrate that AnomaMind consistently improves anomaly detection performance and enhances generalization across heterogeneous anomaly patterns, validating the effectiveness of tool-augmented reasoning for anomaly detection. The code is available at https://github.com/Xiaoyu-Tao/AnomaMind-TS.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。