Adversarial-Robust Multivariate Time-Series Anomaly Detection via Joint Information Retention

arXiv cs.LG / 3/30/2026

💬 OpinionSignals & Early TrendsIdeas & Deep AnalysisModels & Research

Key Points

  • The paper introduces ARTA, an adversarially robust approach to multivariate time-series anomaly detection designed to resist localized input corruptions and structured noise.
  • ARTA jointly trains an anomaly detector with a sparsity-constrained mask (perturbation) generator using a min-max optimization objective, where the generator finds minimal task-relevant temporal perturbations that maximally raise anomaly scores.
  • The detector is trained to remain stable against these structured adversarial perturbations, pushing it to rely on distributed and stable temporal patterns rather than spurious localized artifacts.
  • The learned masks are intended to act as explanatory signals that reveal the detector’s sensitivity to adversarial temporal corruptions and brittle decision pathways.
  • Experiments on the TSB-AD benchmark report consistent performance improvements over state-of-the-art baselines and more graceful degradation as noise levels increase.

Abstract

Time-series anomaly detection (TSAD) is a critical component in monitoring complex systems, yet modern deep learning-based detectors are often highly sensitive to localized input corruptions and structured noise. We propose ARTA (Adversarially Robust multivariate Time-series Anomaly detection via joint information retention), a joint training framework that improves detector robustness through a principled min-max optimization objective. ARTA comprises an anomaly detector and a sparsity-constrained mask generator that are trained simultaneously. The generator identifies minimal, task-relevant temporal perturbations that maximally increase the detector's anomaly score, while the detector is optimized to remain stable under these structured perturbations. The resulting masks characterize the detector's sensitivity to adversarial temporal corruptions and can serve as explanatory signals for the detector's decisions. This adversarial training strategy exposes brittle decision pathways and encourages the detector to rely on distributed and stable temporal patterns rather than spurious localized artifacts. We conduct extensive experiments on the TSB-AD benchmark, demonstrating that ARTA consistently improves anomaly detection performance across diverse datasets and exhibits significantly more graceful degradation under increasing noise levels compared to state-of-the-art baselines.