{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,16]],"date-time":"2026-02-16T09:16:03Z","timestamp":1771233363787,"version":"3.50.1"},"reference-count":79,"publisher":"Springer Science and Business Media LLC","issue":"2","license":[{"start":{"date-parts":[[2025,12,26]],"date-time":"2025-12-26T00:00:00Z","timestamp":1766707200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"},{"start":{"date-parts":[[2026,1,20]],"date-time":"2026-01-20T00:00:00Z","timestamp":1768867200000},"content-version":"vor","delay-in-days":25,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Complex Intell. Syst."],"published-print":{"date-parts":[[2026,2]]},"abstract":"<jats:title>Abstract<\/jats:title>\n                  <jats:p>\n                    Evaluating unsupervised anomaly detection presents significant challenges due to the absence of ground truth labels and the complex nature of anomaly distributions. In this study, we introduce two novel intrinsic evaluation metrics: the Anomaly Separation Index (ASI) and the Anomaly Separation and Overlap Index (ASOI), designed to overcome the limitations of traditional metrics, which cannot assess model performance without labels. ASI quantifies the degree of separation between detected anomalies and normal distributions, while ASOI incorporates both separation and distributional overlap between them, providing an innovative evaluation approach for anomaly detection models, enabling performance assessment even in the absence of ground truth labels. Extensive experiments through precision degradation tests and unsupervised anomaly detection algorithms were conducted on multiple datasets. The results indicate that the metrics consistently correlate with traditional metrics, such as the\n                    <jats:inline-formula>\n                      <jats:alternatives>\n                        <jats:tex-math>$$F_1$$<\/jats:tex-math>\n                        <mml:math xmlns:mml=\"http:\/\/www.w3.org\/1998\/Math\/MathML\">\n                          <mml:msub>\n                            <mml:mi>F<\/mml:mi>\n                            <mml:mn>1<\/mml:mn>\n                          <\/mml:msub>\n                        <\/mml:math>\n                      <\/jats:alternatives>\n                    <\/jats:inline-formula>\n                    score, in various benchmark datasets characterized by complex feature interactions and varying levels of anomaly contamination. ASOI showed a higher correlation with the\n                    <jats:inline-formula>\n                      <jats:alternatives>\n                        <jats:tex-math>$$F_1$$<\/jats:tex-math>\n                        <mml:math xmlns:mml=\"http:\/\/www.w3.org\/1998\/Math\/MathML\">\n                          <mml:msub>\n                            <mml:mi>F<\/mml:mi>\n                            <mml:mn>1<\/mml:mn>\n                          <\/mml:msub>\n                        <\/mml:math>\n                      <\/jats:alternatives>\n                    <\/jats:inline-formula>\n                    score compared to ASI and several other classical intrinsic metrics. Furthermore, the findings underscore the utility of ASOI as an internal validation measure for model optimization in unsupervised anomaly tasks. The proposed metrics are computationally efficient, scalable, and adaptable to a variety of anomaly detection scenarios, making them practical for real-world applications across industries such as cybersecurity, fraud detection, and predictive maintenance.\n                  <\/jats:p>","DOI":"10.1007\/s40747-025-02204-0","type":"journal-article","created":{"date-parts":[[2025,12,26]],"date-time":"2025-12-26T14:14:43Z","timestamp":1766758483000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["ASOI: anomaly separation and overlap index, an internal evaluation metric for unsupervised anomaly detection"],"prefix":"10.1007","volume":"12","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-8329-8038","authenticated-orcid":false,"given":"Jiyan Salim","family":"Mahmud","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zakarya","family":"Farou","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Imre","family":"Lend\u00e1k","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2025,12,26]]},"reference":[{"key":"2204_CR1","doi-asserted-by":"publisher","DOI":"10.1007\/978-94-015-3994-4","volume-title":"Identification of outliers","author":"DM Hawkins","year":"1980","unstructured":"Hawkins DM (1980) Identification of outliers. Chapman and Hall, London"},{"issue":"3","key":"2204_CR2","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/1541880.1541882","volume":"41","author":"V Chandola","year":"2009","unstructured":"Chandola V, Banerjee A, Kumar V (2009) Anomaly detection: a survey. ACM Comput Surv (CSUR) 41(3):1\u201358. https:\/\/doi.org\/10.1145\/1541880.1541882","journal-title":"ACM Comput Surv (CSUR)"},{"key":"2204_CR3","doi-asserted-by":"publisher","first-page":"19","DOI":"10.1016\/j.jnca.2015.11.016","volume":"60","author":"M Ahmed","year":"2016","unstructured":"Ahmed M, Mahmood A, Hu J (2016) A survey of network anomaly detection techniques. J Netw Comput Appl 60:19\u201331","journal-title":"J Netw Comput Appl"},{"issue":"1","key":"2204_CR4","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1080\/00401706.1969.10490657","volume":"11","author":"FE Grubbs","year":"1969","unstructured":"Grubbs FE (1969) Procedures for detecting outlying observations in samples. Technometrics 11(1):1\u201321","journal-title":"Technometrics"},{"issue":"4","key":"2204_CR5","doi-asserted-by":"publisher","first-page":"488","DOI":"10.1214\/aoms\/1177729747","volume":"21","author":"WJ Dixon","year":"1950","unstructured":"Dixon WJ (1950) Analysis of extreme values. Ann Math Stat 21(4):488\u2013506","journal-title":"Ann Math Stat"},{"issue":"2","key":"2204_CR6","doi-asserted-by":"publisher","first-page":"221","DOI":"10.2307\/1268354","volume":"17","author":"B Rosner","year":"1975","unstructured":"Rosner B (1975) On the detection of many outliers. Technometrics 17(2):221\u2013227","journal-title":"Technometrics"},{"key":"2204_CR7","doi-asserted-by":"crossref","unstructured":"Domingues R, Filippone M, Michiardi P, Zouaoui J (2018) A comparative evaluation of outlier detection algorithms: experiments and analyses. In: 2018 IEEE international conference on data science and advanced analytics (DSAA). IEEE, pp 1\u201310","DOI":"10.1016\/j.patcog.2017.09.037"},{"issue":"4","key":"2204_CR8","doi-asserted-by":"publisher","first-page":"0152173","DOI":"10.1371\/journal.pone.0152173","volume":"11","author":"M Goldstein","year":"2016","unstructured":"Goldstein M, Uchida S (2016) A comparative evaluation of unsupervised anomaly detection algorithms for multivariate data. PLoS ONE 11(4):0152173","journal-title":"PLoS ONE"},{"key":"2204_CR9","first-page":"2973","volume":"11","author":"G Blanchard","year":"2010","unstructured":"Blanchard G, Lee G, Scott C (2010) Semi-supervised anomaly detection. J Mach Learn Res 11:2973\u20133009","journal-title":"J Mach Learn Res"},{"key":"2204_CR10","doi-asserted-by":"crossref","unstructured":"Mahmud JS, Lendak I (2024) Enhancing one-class anomaly detection in unlabeled datasets through unsupervised data refinement. In: 2024 IEEE 22nd Jubilee international symposium on intelligent systems and informatics (SISY). IEEE, pp 497\u2013502","DOI":"10.1109\/SISY62279.2024.10737577"},{"key":"2204_CR11","doi-asserted-by":"crossref","unstructured":"Xu H, Chen W, Zhao N, Li Z, Bu J, Li Z, Liu Y, Zhao Y, Pei D, Feng Y et al (2018) Unsupervised anomaly detection via variational auto-encoder for seasonal KPIs in web applications. In: Proceedings of the 2018 World Wide Web conference, pp 187\u2013196","DOI":"10.1145\/3178876.3185996"},{"key":"2204_CR12","doi-asserted-by":"publisher","unstructured":"Mahmud Jiyan Salim BE, Imre L (2024) A semi-supervised framework for anomaly detection and data labeling for industrial control systems. In: Trajanovic M, Filipovic N, Zdravkovic M (eds) Disruptive information technologies for a Smart Society. Springer, Cham, pp 149\u2013160. https:\/\/doi.org\/10.1007\/978-3-031-50755-7_15","DOI":"10.1007\/978-3-031-50755-7_15"},{"key":"2204_CR13","unstructured":"Ester M, Kriegel H-P, Sander J, Xu X (1996) A density-based algorithm for discovering clusters in large spatial databases with noise. In: Proceedings of the 2nd international conference on knowledge discovery and data mining, pp 226\u2013231"},{"issue":"6191","key":"2204_CR14","doi-asserted-by":"publisher","first-page":"1492","DOI":"10.1126\/science.1242072","volume":"344","author":"A Rodriguez","year":"2014","unstructured":"Rodriguez A, Laio A (2014) Clustering by fast search and find of density peaks. Science 344(6191):1492\u20131496","journal-title":"Science"},{"key":"2204_CR15","doi-asserted-by":"crossref","unstructured":"Liu FT, Ting KM, Zhou Z-H (2008) Isolation forest. In: 2008 eighth IEEE international conference on data mining. IEEE, pp 413\u2013422","DOI":"10.1109\/ICDM.2008.17"},{"key":"2204_CR16","doi-asserted-by":"crossref","unstructured":"Hariri S, Kind MC, Brunner RJ (2021) Extended isolation forest, In: IEEE Transactions on Knowledge and Data Engineering, vol. 33, no. 4, pp. 1479\u20131489. https:\/\/doi.org\/10.1109\/TKDE.2019.2947676","DOI":"10.1109\/TKDE.2019.2947676"},{"key":"2204_CR17","unstructured":"Chalapathy R, Chawla S (2019) Deep learning for anomaly detection: a survey. arXiv preprint arXiv:1901.03407"},{"issue":"2","key":"2204_CR18","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3439950","volume":"54","author":"G Pang","year":"2021","unstructured":"Pang G, Shen C, Cao L, Hengel A (2021) Deep learning for anomaly detection: a review. ACM Comput Surv (CSUR) 54(2):1\u201338","journal-title":"ACM Comput Surv (CSUR)"},{"key":"2204_CR19","doi-asserted-by":"publisher","first-page":"120","DOI":"10.1109\/RBME.2010.2083647","volume":"3","author":"R Xu","year":"2009","unstructured":"Xu R, Wunsch D (2009) Clustering algorithms in biomedical research: a review. IEEE Rev Biomed Eng 3:120\u2013154","journal-title":"IEEE Rev Biomed Eng"},{"issue":"1","key":"2204_CR20","first-page":"27","volume":"5","author":"E Rend\u00f3n","year":"2011","unstructured":"Rend\u00f3n E, Abundez I, Arizmendi A, Quiroz EM (2011) Internal versus external cluster validation indexes. Int J Comput Commun 5(1):27\u201334","journal-title":"Int J Comput Commun"},{"key":"2204_CR21","doi-asserted-by":"publisher","unstructured":"Aggarwal CC (2017) Outlier analysis, 2nd edn. Springer, Cham. Hardcover pub. 2016-12-22; eBook pub. 2016-12-10; Softcover pub. 2018-05-04. https:\/\/doi.org\/10.1007\/978-3-319-47578-3","DOI":"10.1007\/978-3-319-47578-3"},{"key":"2204_CR22","unstructured":"Zong B, Song Q, Min MR, Cheng W, Lumezanu C, Cho D-K, Chen H (2018) Deep autoencoding gaussian mixture model for unsupervised anomaly detection. In: International conference on learning representations (ICLR). https:\/\/openreview.net\/forum?id=BJJLHbb0-"},{"issue":"1","key":"2204_CR23","first-page":"1","volume":"2","author":"J An","year":"2015","unstructured":"An J, Cho S (2015) Variational autoencoder based anomaly detection using reconstruction probability. Spec Lect IE 2(1):1\u201318","journal-title":"Spec Lect IE"},{"key":"2204_CR24","doi-asserted-by":"crossref","unstructured":"Bergmann P, L\u00f6we S, Fauser M, Sattlegger D, Steger C (2018) Improving unsupervised defect segmentation by applying structural similarity to autoencoders. arXiv preprint arXiv:1807.02011","DOI":"10.5220\/0007364503720380"},{"issue":"1","key":"2204_CR25","doi-asserted-by":"publisher","first-page":"303","DOI":"10.1109\/SURV.2013.052213.00046","volume":"16","author":"MH Bhuyan","year":"2014","unstructured":"Bhuyan MH, Bhattacharyya DK, Kalita JK (2014) Network anomaly detection: methods, systems and tools. IEEE Commun Surv Tutor 16(1):303\u2013336. https:\/\/doi.org\/10.1109\/SURV.2013.052213.00046","journal-title":"IEEE Commun Surv Tutor"},{"issue":"7","key":"2204_CR26","doi-asserted-by":"publisher","first-page":"141","DOI":"10.1145\/3464423","volume":"54","author":"T Fernando","year":"2021","unstructured":"Fernando T, Gammulle H, Denman S, Sridharan S, Fookes C (2021) Deep learning for medical anomaly detection\u2014a survey. ACM Comput Surv 54(7):141\u2013114137. https:\/\/doi.org\/10.1145\/3464423","journal-title":"ACM Comput Surv"},{"key":"2204_CR27","doi-asserted-by":"publisher","DOI":"10.1016\/j.ymssp.2019.106587","volume":"138","author":"Y Lei","year":"2020","unstructured":"Lei Y, Yang B, Jiang X, Jia F, Li N, Nandi AK (2020) Applications of machine learning to machine fault diagnosis: a review and roadmap. Mech Syst Signal Process 138:106587. https:\/\/doi.org\/10.1016\/j.ymssp.2019.106587","journal-title":"Mech Syst Signal Process"},{"key":"2204_CR28","doi-asserted-by":"publisher","unstructured":"Lin D (2024) Key considerations to be applied while leveraging machine learning for financial statement fraud detection: a review. IEEE Access 12:168213\u2013168228. https:\/\/doi.org\/10.1109\/ACCESS.2024.3488832","DOI":"10.1109\/ACCESS.2024.3488832"},{"key":"2204_CR29","doi-asserted-by":"publisher","first-page":"891","DOI":"10.1007\/s10618-015-0444-8","volume":"30","author":"GO Campos","year":"2016","unstructured":"Campos GO, Zimek A, Sander J, Campello RJGB, Micenkov\u2019a B, Schubert E, Assent I, Houle ME (2016) On the evaluation of unsupervised outlier detection: measures, datasets, and an empirical study. Data Min Knowl Discov 30:891\u2013927","journal-title":"Data Min Knowl Discov"},{"key":"2204_CR30","doi-asserted-by":"publisher","unstructured":"Elmrabit N, Zhou F, Li F, Zhou H (2020) Evaluation of machine learning algorithms for anomaly detection. In: 2020 international conference on cyber security and protection of digital services (cyber security), pp 1\u20138. https:\/\/doi.org\/10.1109\/CyberSecurity49315.2020.9138871","DOI":"10.1109\/CyberSecurity49315.2020.9138871"},{"key":"2204_CR31","unstructured":"Goix N (2016) How to evaluate the quality of unsupervised anomaly detection algorithms? arXiv preprint arXiv:1607.01152"},{"issue":"4","key":"2204_CR32","doi-asserted-by":"publisher","first-page":"47","DOI":"10.1145\/3394053","volume":"14","author":"HO Marques","year":"2020","unstructured":"Marques HO, Campello RJGB, Sander J, Zimek A (2020) Internal evaluation of unsupervised outlier detection. ACM Trans Knowl Discov Data 14(4):47","journal-title":"ACM Trans Knowl Discov Data"},{"key":"2204_CR33","unstructured":"Palacio-Ni\u00f1o J-O, Berzal F (2019) Evaluation metrics for unsupervised learning algorithms. arXiv preprint arXiv:1905.05667"},{"issue":"3","key":"2204_CR34","first-page":"259","volume":"32","author":"HV Nguyen","year":"2016","unstructured":"Nguyen HV, Nguyen TT, Nguyen QU (2016) An evaluation method for unsupervised anomaly detection algorithms. J Comput Sci Cybern 32(3):259\u2013272","journal-title":"J Comput Sci Cybern"},{"key":"2204_CR35","unstructured":"Duan S, Matthey L, Saraiva A, Watters N, Burgess C, Lerchner A, Higgins I (2020) Unsupervised model selection for variational disentangled representation learning. In: ICLR"},{"key":"2204_CR36","unstructured":"Lin Z, Thekumparampil K, Fanti G, Oh S (2020) InfoGAN-CR and modelcentrality: self-supervised model training and selection for disentangling GANs. In: International conference on machine learning, pp 6127\u20136139"},{"issue":"5","key":"2204_CR37","doi-asserted-by":"publisher","first-page":"604","DOI":"10.1145\/324133.324140","volume":"46","author":"JM Kleinberg","year":"1999","unstructured":"Kleinberg JM (1999) Authoritative sources in a hyperlinked environment. J ACM 46(5):604\u2013632","journal-title":"J ACM"},{"issue":"1","key":"2204_CR38","doi-asserted-by":"publisher","first-page":"11","DOI":"10.1145\/2594473.2594476","volume":"15","author":"A Zimek","year":"2013","unstructured":"Zimek A, Campello RJGB, Sander J (2013) Ensembles for unsupervised outlier detection: challenges and research questions\u2014a position paper. SIGKDD Explor 15(1):11\u201322","journal-title":"SIGKDD Explor"},{"key":"2204_CR39","doi-asserted-by":"publisher","unstructured":"Zhao Y, Zhang S, Akoglu L (2022) Toward unsupervised outlier model selection. In: 2022 IEEE international conference on data mining (ICDM), pp 773\u2013782 . https:\/\/doi.org\/10.1109\/ICDM54844.2022.00088","DOI":"10.1109\/ICDM54844.2022.00088"},{"issue":"1","key":"2204_CR40","doi-asserted-by":"publisher","first-page":"19","DOI":"10.1145\/3606274.3606277","volume":"25","author":"MQ Ma","year":"2023","unstructured":"Ma MQ, Zhao Y, Zhang X, Akoglu L (2023) The need for unsupervised outlier model selection: a review and evaluation of internal evaluation strategies. ACM SIGKDD Explor Newsl 25(1):19\u201335","journal-title":"ACM SIGKDD Explor Newsl"},{"issue":"1","key":"2204_CR41","doi-asserted-by":"publisher","first-page":"0210236","DOI":"10.1371\/journal.pone.0210236","volume":"14","author":"MZ Rodriguez","year":"2019","unstructured":"Rodriguez MZ, Comin CH, Casanova D, Bruno OM, Amancio DR, Costa LDF, Rodrigues FA (2019) Clustering algorithms: a comparative approach. PLOS ONE 14(1):0210236","journal-title":"PLOS ONE"},{"key":"2204_CR42","doi-asserted-by":"publisher","unstructured":"Berkhin P (2006) In: Kogan J, Nicholas C, Teboulle M (eds) A survey of clustering data mining techniques. Springer, Berlin, Heidelberg, pp 25\u201371. https:\/\/doi.org\/10.1007\/3-540-28349-8_2","DOI":"10.1007\/3-540-28349-8_2"},{"issue":"2","key":"2204_CR43","first-page":"2272","volume":"5","author":"K Kameshwaran","year":"2014","unstructured":"Kameshwaran K, Malarvizhi K (2014) Survey on clustering techniques in data mining. Int J Comput Sci Inf Technol 5(2):2272\u20132276","journal-title":"Int J Comput Sci Inf Technol"},{"key":"2204_CR44","doi-asserted-by":"crossref","unstructured":"Amelio A, Tagarelli A (2018) In: Ranganathan, S. and Nakai, K. and Schonbach, C. (eds) Data mining: clustering. In: Encyclopedia of bioinformatics and computational biology: ABC of Bioinformatics. Elsevier Science, Cambridge, MA, United States., pp437\u2013448. isbn = 9780128114322","DOI":"10.1016\/B978-0-12-809633-8.20489-5"},{"key":"2204_CR45","doi-asserted-by":"publisher","unstructured":"H\u00e4rdle WK, Simar L. (2007). Applied multivariate statistical analysis, Springer, Berlin, Heidelberg, pp 93\u2013146, isbn=978-3-540-72244-1. https:\/\/doi.org\/10.1007\/978-3-540-72244-1_4","DOI":"10.1007\/978-3-540-72244-1_4"},{"key":"2204_CR46","doi-asserted-by":"publisher","DOI":"10.4324\/9781003047223","volume-title":"Advanced and multivariate statistical methods: practical application and interpretation","author":"CA Mertler","year":"2021","unstructured":"Mertler CA, Vannatta RA, LaVenia KN (2021) Advanced and multivariate statistical methods: practical application and interpretation. Routledge, London"},{"key":"2204_CR47","doi-asserted-by":"publisher","DOI":"10.4324\/9780203771587","volume-title":"Statistical power analysis for the behavioral sciences","author":"J Cohen","year":"1988","unstructured":"Cohen J (1988) Statistical power analysis for the behavioral sciences, 2nd edn. Lawrence Erlbaum Associates, Hillsdale. https:\/\/doi.org\/10.4324\/9780203771587","edition":"2"},{"issue":"1","key":"2204_CR48","doi-asserted-by":"publisher","first-page":"70","DOI":"10.1109\/COMST.2014.2336610","volume":"17","author":"DJ Weller-Fahy","year":"2014","unstructured":"Weller-Fahy DJ, Borghetti BJ, Sodemann AA (2014) A survey of distance and similarity measures used within network intrusion anomaly detection. IEEE Commun Surv Tutor 17(1):70\u201391","journal-title":"IEEE Commun Surv Tutor"},{"key":"2204_CR49","doi-asserted-by":"publisher","first-page":"210","DOI":"10.1515\/crll.1909.136.210","volume":"136","author":"E Hellinger","year":"1909","unstructured":"Hellinger E (1909) Neue begr\u00fcndung der theorie quadratischer formen von unendlich vielen variablen. Journal f\u00fcr die reine und angewandte Mathematik 136:210\u2013271","journal-title":"Journal f\u00fcr die reine und angewandte Mathematik"},{"issue":"389","key":"2204_CR50","doi-asserted-by":"publisher","first-page":"209","DOI":"10.1080\/01621459.1985.10477163","volume":"80","author":"GR Terrell","year":"1985","unstructured":"Terrell GR, Scott DW (1985) Oversmoothed nonparametric density estimates. J Am Stat Assoc 80(389):209\u2013214. https:\/\/doi.org\/10.1080\/01621459.1985.10477163","journal-title":"J Am Stat Assoc"},{"issue":"1","key":"2204_CR51","doi-asserted-by":"publisher","first-page":"1658","DOI":"10.4249\/scholarpedia.1658","volume":"4","author":"PE Latham","year":"2009","unstructured":"Latham PE, Roudi Y (2009) Mutual information. Scholarpedia 4(1):1658","journal-title":"Scholarpedia"},{"issue":"18","key":"2204_CR52","doi-asserted-by":"publisher","first-page":"2378","DOI":"10.1016\/j.fss.2007.12.023","volume":"159","author":"A Fern\u00e1ndez","year":"2008","unstructured":"Fern\u00e1ndez A, Garc\u00eda S, Jesus MJ, Herrera F (2008) A study of the behaviour of linguistic fuzzy rule based classification systems in the framework of imbalanced data-sets. Fuzzy Sets Syst 159(18):2378\u20132398. https:\/\/doi.org\/10.1016\/j.fss.2007.12.023","journal-title":"Fuzzy Sets Syst"},{"key":"2204_CR53","doi-asserted-by":"crossref","unstructured":"Shin H-K, Lee W, Yun J-H, Min B-G (2021) Two ICS security datasets and anomaly detection contest on the HIL-based augmented ICS testbed. In: Proceedings of the 14th cyber security experimentation and test workshop, pp 36\u201340","DOI":"10.1145\/3474718.3474719"},{"key":"2204_CR54","doi-asserted-by":"crossref","unstructured":"Mathur AP, Tippenhauer NO (2016) SWaT: a water treatment testbed for research and training on ICS security. In: 2016 international workshop on cyber-physical systems for smart water networks (CySWater). IEEE, pp 31\u201336","DOI":"10.1109\/CySWater.2016.7469060"},{"key":"2204_CR55","doi-asserted-by":"publisher","DOI":"10.1016\/j.dib.2022.108473","volume":"43","author":"MI Radaideh","year":"2022","unstructured":"Radaideh MI, Pappas C, Cousineau S (2022) Real electronic signal data from particle accelerator power systems for machine learning anomaly detection. Data Brief 43:108473","journal-title":"Data Brief"},{"key":"2204_CR56","doi-asserted-by":"publisher","unstructured":"Katser ID, Kozitsin VO (2020) Skoltech anomaly benchmark (SKAB). Kaggle. https:\/\/doi.org\/10.34740\/KAGGLE\/DSV\/1693952","DOI":"10.34740\/KAGGLE\/DSV\/1693952"},{"key":"2204_CR57","doi-asserted-by":"publisher","unstructured":"Ahmad S, Lavin A, Purdy S, Agha Z, Danforth I, Lewis M, Scheinkman L, Taylor M, Gokhale J, Silver T, Smirnov M, Marshall A, Le Borgne M, Takashina Y, Kibish S et al (2019) numenta\/NAB: v1.1. Zenodo. https:\/\/doi.org\/10.5281\/zenodo.3571294","DOI":"10.5281\/zenodo.3571294"},{"key":"2204_CR58","unstructured":"Dua D, Graff C (2019) UCI machine learning repository. https:\/\/archive.ics.uci.edu"},{"key":"2204_CR59","unstructured":"Dal Pozzolo A, Boracchi G, Caelen O, Alippi C, Bontempi G (2015) Credit card fraud detection dataset. Machine Learning Group at ULB. https:\/\/www.kaggle.com\/mlg-ulb\/creditcardfraud"},{"key":"2204_CR60","unstructured":"Zolanvari M, Teixeira MA, Gupta L, Khan KM, Jain R (2021) WUSTL-IIOT-2021 dataset for IIoT cybersecurity research, USA. http:\/\/www.cse.wustl.edu\/. Accessed 2024-08-18"},{"key":"2204_CR61","doi-asserted-by":"publisher","unstructured":"Xu H, Chen W, Zhao N, Li Z, Bu J, Li Z, Liu Y, Zhao Y, Pei D, Feng Y, Chen J, Wang Z, Qiao H (2018) Unsupervised Anomaly Detection via Variational Auto-Encoder for Seasonal KPIs in Web Applications, International World Wide Web Conferences Steering Committee, Republic and Canton of Geneva, CHE, In: Proceedings of the 2018 World Wide Web Conference, Lyon, France, pp 187\u2013196. https:\/\/doi.org\/10.1145\/3178876.3185996, isbn = 9781450356398","DOI":"10.1145\/3178876.3185996"},{"key":"2204_CR62","doi-asserted-by":"crossref","unstructured":"Liu Z, Luo P, Wang X, Tang X (2015) Deep learning face attributes in the wild. In: Proceedings of the IEEE international conference on computer vision, pp 3730\u20133738","DOI":"10.1109\/ICCV.2015.425"},{"key":"2204_CR63","doi-asserted-by":"publisher","unstructured":"Stolfo S, Fan W, Lee W, Prodromidis A, Chan P KDD Cup 1999 Data. UCI machine learning repository. https:\/\/doi.org\/10.24432\/C51C7N. Accessed 2024-06-24","DOI":"10.24432\/C51C7N"},{"key":"2204_CR64","doi-asserted-by":"crossref","unstructured":"Lavin A, Ahmad S (2015) Evaluating real-time anomaly detection algorithms\u2014the Numenta anomaly benchmark. In: 2015 IEEE 14th international conference on machine learning and applications (ICMLA). IEEE, pp 38\u201344","DOI":"10.1109\/ICMLA.2015.141"},{"key":"2204_CR65","doi-asserted-by":"publisher","first-page":"22","DOI":"10.1016\/j.dss.2014.03.001","volume":"62","author":"S Moro","year":"2014","unstructured":"Moro S, Cortez P, Rita P (2014) A data-driven approach to bank telemarketing analysis. Decis Support Syst 62:22\u201331","journal-title":"Decis Support Syst"},{"key":"2204_CR66","doi-asserted-by":"crossref","unstructured":"Goh J, Adepu S, Tan K et al (2016) A dataset to support research in the design of secure water treatment systems. In: International conference on critical information infrastructures security (CRITIS)","DOI":"10.1007\/978-3-319-71368-7_8"},{"key":"2204_CR67","unstructured":"Shin S, Kim Y, Kim H et al (2018) HAI dataset: cybersecurity challenges in industrial control systems. In: Workshop on Industrial AI"},{"key":"2204_CR68","unstructured":"Wolberg WH, Mangasarian OL (1992) Breast cancer Wisconsin (diagnostic) dataset. UCI Machine Learning Repository"},{"issue":"3\u20134","key":"2204_CR69","doi-asserted-by":"publisher","first-page":"591","DOI":"10.1093\/biomet\/52.3-4.591","volume":"52","author":"SS Shapiro","year":"1965","unstructured":"Shapiro SS, Wilk MB (1965) An analysis of variance test for normality (complete samples). Biometrika 52(3\u20134):591\u2013611","journal-title":"Biometrika"},{"key":"2204_CR70","doi-asserted-by":"publisher","first-page":"21","DOI":"10.1016\/j.imavis.2018.04.004","volume":"75","author":"P Rodr\u00edguez","year":"2018","unstructured":"Rodr\u00edguez P, Bautista MA, Gonzalez J, Escalera S (2018) Beyond one-hot encoding: lower dimensional target embedding. Image Vis Comput 75:21\u201331","journal-title":"Image Vis Comput"},{"issue":"2","key":"2204_CR71","doi-asserted-by":"publisher","first-page":"93","DOI":"10.1145\/335191.335388","volume":"29","author":"MM Breunig","year":"2000","unstructured":"Breunig MM, Kriegel H-P, Ng RT, Sander J (2000) LOF: identifying density-based local outliers. ACM SIGMOD Rec 29(2):93\u2013104","journal-title":"ACM SIGMOD Rec"},{"issue":"7","key":"2204_CR72","doi-asserted-by":"publisher","first-page":"1443","DOI":"10.1162\/089976601750264965","volume":"13","author":"B Sch\u00f6lkopf","year":"2001","unstructured":"Sch\u00f6lkopf B, Platt JC, Shawe-Taylor J, Smola AJ, Williamson RC (2001) Estimating the support of a high-dimensional distribution. Neural Comput 13(7):1443\u20131471","journal-title":"Neural Comput"},{"key":"2204_CR73","doi-asserted-by":"publisher","DOI":"10.1201\/9780429246593","volume-title":"An introduction to the bootstrap","author":"B Efron","year":"1994","unstructured":"Efron B, Tibshirani RJ (1994) An introduction to the bootstrap. Chapman & Hall\/CRC, New York"},{"key":"2204_CR74","doi-asserted-by":"publisher","DOI":"10.1007\/b138696","volume-title":"Permutation, parametric, and bootstrap tests of hypotheses","author":"PI Good","year":"2005","unstructured":"Good PI (2005) Permutation, parametric, and bootstrap tests of hypotheses, 3rd edn. Springer, New York. https:\/\/doi.org\/10.1007\/b138696","edition":"3"},{"key":"2204_CR75","doi-asserted-by":"publisher","unstructured":"Stone M (1974) Cross-validatory choice and assessment of statistical predictions. J Roy Stat Soc Ser B (Methodol) 36(2):111\u2013147. https:\/\/doi.org\/10.1111\/j.2517-6161.1974.tb00994.x","DOI":"10.1111\/j.2517-6161.1974.tb00994.x"},{"key":"2204_CR76","first-page":"224","volume":"1","author":"BD Craven","year":"2011","unstructured":"Craven BD, Islam SMN (2011) Ordinary least-squares regression. SAGE Dict Quant Manag Res 1:224\u2013228","journal-title":"SAGE Dict Quant Manag Res"},{"key":"2204_CR77","volume-title":"Introduction to linear regression analysis","author":"DC Montgomery","year":"2021","unstructured":"Montgomery DC, Peck EA, Vining GG (2021) Introduction to linear regression analysis. Wiley, Hoboken"},{"key":"2204_CR78","unstructured":"Ruff L, Vandermeulen R, Goernitz N, Deecke L, Siddiqui SA, Binder A, M\u00fcller E, Kloft M (2018) Deep one-class classification. In: International conference on machine learning. PMLR, pp 4393\u20134402. https:\/\/proceedings.mlr.press\/v80\/ruff18a.html"},{"key":"2204_CR79","doi-asserted-by":"publisher","unstructured":"Frazier PI (2018) Bayesian optimization. In: Recent advances in optimization and modeling of contemporary problems, pp 255\u2013278. https:\/\/doi.org\/10.1287\/educ.2018.0188","DOI":"10.1287\/educ.2018.0188"}],"container-title":["Complex &amp; Intelligent Systems"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s40747-025-02204-0","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s40747-025-02204-0.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s40747-025-02204-0.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,2,16]],"date-time":"2026-02-16T08:24:19Z","timestamp":1771230259000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s40747-025-02204-0"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,12,26]]},"references-count":79,"journal-issue":{"issue":"2","published-print":{"date-parts":[[2026,2]]}},"alternative-id":["2204"],"URL":"https:\/\/doi.org\/10.1007\/s40747-025-02204-0","relation":{},"ISSN":["2199-4536","2198-6053"],"issn-type":[{"value":"2199-4536","type":"print"},{"value":"2198-6053","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,12,26]]},"assertion":[{"value":"25 February 2025","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"4 December 2025","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"26 December 2025","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declare no competing financial interests or personal relationships that could influence this work.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}}],"article-number":"84"}}