WAND让异常检测既快又可解释,无需额外计算就能给出每个异常的特征原因。
Witnesses Explain Anomalies

- 用球面上的方向向量直接定位异常特征,评分与解释一体生成。
- 在47个数据集上平均表现最优,精度不降反提升解释能力。
- 解释速度快、更准确,适合需要可信决策的工业场景使用。
无监督异常检测需在单次遍历中为未标记且含噪声的数据点打分,并解释为何被标记。现有方法仅提供分数,解释依赖后置的SHAP或LIME,需千次查询且近似模型。本文提出WAND,一种原生可解释的表格型异常检测器。它基于单位球面方向进行计算,通过投影偏离子高斯极值基线的程度评分。关键创新在于:触发异常的“见证方向”即为解释,是特征空间中的向量,无需额外开销即可获得,且因分数可微,还能通过梯度恢复。评分复杂度线性于样本量,探针效率边界保证每个异常都有见证方向(即解释)。在47个ADBench数据集上,WAND在ROC-AUC一致的前提下取得最佳平均弗里德曼排名,相较16种无监督基线,解释更准确、忠实,查询成本仅为后置方法的几分之一。因此,WAND是一种实用、可解释的异常检测方案。
原文摘要 · Abstract (English)
Unsupervised anomaly detection scores each point of an unlabelled, contaminated sample in a single pass, and increasingly must also explain why a point is flagged. Yet the dominant detectors give a score with no account of which features drive it, and explanations are bolted on post-hoc with SHAP or LIME, which re-query the detector thousands of times per point and only approximate it. We introduce WAND, an unsupervised tabular anomaly detector that is explainable by design. WAND organises its computation around directions on the unit sphere, scoring each point by how far its projection escapes a sub-Gaussian extreme-value baseline. The originality of our approach is that the witness directions that flag a point, being vectors in feature space, are its explanation, a per-feature attribution obtained at no cost over scoring and, since the score is differentiable, recoverable by gradients. Scoring is linear in the sample size, and a probe-efficiency bound guarantees every anomaly a witness, hence an explanation. Across 47 ADBench datasets WAND attains the best mean Friedman rank at ROC-AUC parity with 16 unsupervised baselines, so the gain is interpretability at no accuracy cost; its native explanations are more accurate and faithful than post-hoc SHAP/LIME and ECOD at a fraction of the query cost. WAND is thus a practical, interpretable solution for explainable anomaly detection.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。