arXiv:2606.09942cs.SEcs.AI2026-06

提出多模态异常检测与根因分析方法,解决微服务系统故障定位难题。

Anomaly Detection and Root Cause Analysis for Microservice Systems

论文配图:Anomaly Detection and Root Cause Analysis for Microservice Systems
图 1 · 摘自论文原文
  • 融合指标、事件等多源数据,实现端到端异常检测与根因分析。
  • 在真实系统上验证有效,无需依赖服务调用图,鲁棒性强。
  • 构建标准数据集和评估框架,推动领域可比性研究。

微服务系统广泛用于云应用,但其复杂性导致故障不可避免,影响用户体验并造成经济损失。自动化异常检测与根因分析(RCA)是当前研究热点,但现有技术存在五大局限:一、将检测与根因分析分离,检测不准时易失效;二、仅关注指标、日志与链路追踪,忽略API调用、配置变更等事件数据;三、多数需预设服务调用图,无图则无法诊断;四、缺乏标准化数据集与评估框架,难以公平比较;五、基于因果推断的RCA方法在有效性、效率与鲁棒性方面仍不明确。本论文通过两组贡献应对上述问题:第一,提出BARO(面向指标数据的端到端检测与RCA)、EventADL(面向事件数据的端到端框架)、TORAI(无需调用图的多模态RCA框架),在真实微服务系统上验证了其有效性和鲁棒性;第二,构建RCAEval基准测试平台,提供可复现数据集与基线,对现有方法进行系统评估,为未来研究提供方向指引。本工作推进了微服务故障的自动化检测与根因分析,助力事故缓解与修复研究。

原文摘要 · Abstract (English)

Microservice systems are widely used to build cloud applications, yet their complexity makes failures inevitable, degrading user experience and causing economic loss. Automated anomaly detection and root cause analysis (RCA) are now active research areas, but existing techniques share five limitations. First, most treat anomaly detection and RCA separately, assuming anomalies are detected correctly, and falter when detection is imprecise due to noise or delay. Second, they focus on metrics, logs, and traces, leaving event data such as API calls and configuration changes underexplored. Third, many require a given service call graph and cannot diagnose without one. Fourth, the field lacks standardised datasets and evaluation frameworks, so methods are hard to compare fairly. Fifth, although causal inference-based RCA has become dominant, its effectiveness, efficiency, and robustness remain unclear. This thesis addresses these limitations through two groups of contributions. The first introduces methods that exploit observability data both independently and collectively. BARO is an end-to-end anomaly detection and RCA approach for metric data. EventADL is an end-to-end framework for event data. TORAI is a multimodal RCA framework that requires no service call graph. Extensive experiments on real microservice systems demonstrate their effectiveness and robustness. The second group delivers benchmarking datasets, an evaluation framework, and systematic evaluation efforts. RCAEval is a comprehensive benchmark providing ready-to-use datasets and reproducible baselines for future research. A systematic evaluation of existing RCA methods, especially causal inference-based approaches, offers insights that guide future directions. This thesis thereby advances automated anomaly detection and RCA for microservice failures, enabling future research on incident mitigation and remediation.

异常检测根因分析微服务多模态

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。