A comparative evaluation of unsupervised anomaly detection techniques using the PyOD Python library, applied to three representative industrial scenarios: Intrusion Detection, Fault Detection, and Predictive Maintenance, offers valuable guidance for selecting robust anomaly detection models in industrial applications beyond cybersecurity.
Abstract
This study presents a comparative evaluation of unsupervised anomaly detection techniques using the PyOD Python library, applied to three representative industrial scenarios: Intrusion Detection, Fault Detection, and Predictive Maintenance. Three public datasets, each corresponding to one of these domains, are used to assess the generalizability and robustness of the methods. The methodology includes data normalization, feature selection, and class balancing to address the specific challenges of each dataset, such as class imbalance and heterogeneous feature spaces. Performance is assessed using metrics such as Precision, Recall, Specificity, F1-score, AUC-PR, AUC-ROC, Balanced Accuracy, and Execution Time (training and testing). The findings offer valuable guidance for selecting robust anomaly detection models in industrial applications beyond cybersecurity, including those related to reliability and maintenance. The code and results will be publicly available on GitHub
https://github.com/hvelesaca/PyOD_OPC-UA
to support future research.
This study develops and evaluates an AI-based analytical system for detecting anomalies in industrial processes. The work reviews major sources of risk in industrial control systems, distinguishes point, contextual, and collective anomalies, and summarizes the principal machine-learning approaches used for industrial a...
Mehdiyeva Almaz, Ahmedov Elmar, Uzakov Gulom et al.· 2026 International Conferenc...· 0 citations
A systematic evaluation of the Sherlock dataset proves that, when high-fidelity event labels are available, supervised multi-class learning provides a robust, accurate, and engineering-valid foundation for intrusion detection in the modern, renewable-integrated grids.
M. Loughmari, M. Bouhadda, A. El Affar· Journal of Intelligent &...· 0 citations
A fully automated IoT-based Network Intrusion Detection System (NIDS), utilizing the Gotham Dataset 2025, using two AutoML approaches: TPOT (Tree-based Pipeline Optimization Tool) and FLAML (cost-aware lightweight AutoML framework).
Susan Al Naqshbandi· Sulaimani Journal for Engine...· 0 citations
A comprehensive overview of intrusion detection systems (IDS), including the following topics: fundamentals, kinds of IDS, methods for detecting intrusions in NIDS, the architecture of IDS, data pre-processing, and examples of ML techniques used in NIDS.
Madhav Sharma· International Journal of Cyb...· 1 citation
It is shown that benchmark accuracy alone is insufficient for deployment readiness and that IDS evaluation should include robustness, interpretability, and alert-management analysis, and the findings demonstrate that benchmark accuracy alone is insufficient for deployment readiness.
Fathoni Mahardika, Ema Utami, Kusrini et al.· Matrik· 1 citation
The findings show that a self-recalibrating unsupervised model can successfully detect faults in a scalable manner, with an interpretable model, low computational complexity and can adapt to ageing assets and varying operating baselines without labelled fault information.
D. Singh, Durga Prasad Panday, Manish Kumar· International journal of com...· 0 citations
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.