Skip to content
Open access

Comparative analysis of unsupervised anomaly detection techniques in industrial systems

Henry O. Velesaca Melissa Ayllon Gutierrez Luis Barrera Muñoz Michael Estrada Santana Juan Plúas Muñoz Juan A. Holgado-Terriza Carlos Salazar A. Sappa
2026 · Manufacturing Review · 0 citations · 13 references

TL;DR

A comparative evaluation of unsupervised anomaly detection techniques using the PyOD Python library, applied to three representative industrial scenarios: Intrusion Detection, Fault Detection, and Predictive Maintenance, offers valuable guidance for selecting robust anomaly detection models in industrial applications beyond cybersecurity.

Abstract

This study presents a comparative evaluation of unsupervised anomaly detection techniques using the PyOD Python library, applied to three representative industrial scenarios: Intrusion Detection, Fault Detection, and Predictive Maintenance. Three public datasets, each corresponding to one of these domains, are used to assess the generalizability and robustness of the methods. The methodology includes data normalization, feature selection, and class balancing to address the specific challenges of each dataset, such as class imbalance and heterogeneous feature spaces. Performance is assessed using metrics such as Precision, Recall, Specificity, F1-score, AUC-PR, AUC-ROC, Balanced Accuracy, and Execution Time (training and testing). The findings offer valuable guidance for selecting robust anomaly detection models in industrial applications beyond cybersecurity, including those related to reliability and maintenance. The code and results will be publicly available on GitHub https://github.com/hvelesaca/PyOD_OPC-UA to support future research.

Read PDF

Similar papers

Conference Jul 2026

AI-based Analytical System for Anomaly Detection in Industrial Processes

This study develops and evaluates an AI-based analytical system for detecting anomalies in industrial processes. The work reviews major sources of risk in industrial control systems, distinguishes point, contextual, and collective anomalies, and summarizes the principal machine-learning approaches used for industrial a...

Mehdiyeva Almaz, Ahmedov Elmar, Uzakov Gulom et al. · 0 citations
Sep 2026

Towards reliable intrusion detection in smart grids: A multiclass, process-aware perspective

A systematic evaluation of the Sherlock dataset proves that, when high-fidelity event labels are available, supervised multi-class learning provides a robust, accurate, and engineering-valid foundation for intrusion detection in the modern, renewable-integrated grids.

M. Loughmari, M. Bouhadda, A. El Affar · 0 citations
Open access Aug 2026

Automated Machine Learning for IoT Intrusion Detection: A Comparative Evaluation of FLAML and TPOT Under Multiple Validation Strategies

A fully automated IoT-based Network Intrusion Detection System (NIDS), utilizing the Gotham Dataset 2025, using two AutoML approaches: TPOT (Tree-based Pipeline Optimization Tool) and FLAML (cost-aware lightweight AutoML framework).

Susan Al Naqshbandi · 0 citations
Review Open access Sep 2026

A Review of Machine Learning Techniques for Network Intrusion Detection Systems

A comprehensive overview of intrusion detection systems (IDS), including the following topics: fundamentals, kinds of IDS, methods for detecting intrusions in NIDS, the architecture of IDS, data pre-processing, and examples of ML techniques used in NIDS.

Madhav Sharma · 1 citation
Review Open access Jul 2026

Operational Weakness Mapping of Machine Learning–Based IntrusionDetection Systems under Realistic Deployment Scenarios

It is shown that benchmark accuracy alone is insufficient for deployment readiness and that IDS evaluation should include robustness, interpretability, and alert-management analysis, and the findings demonstrate that benchmark accuracy alone is insufficient for deployment readiness.

Fathoni Mahardika, Ema Utami, Kusrini et al. · 1 citation
Open access Aug 2026

Adaptive unsupervised anomaly detection with dynamic recalibration for scalable industrial asset reliability monitoring

The findings show that a self-recalibrating unsupervised model can successfully detect faults in a scalable manner, with an interpretable model, low computational complexity and can adapt to ageing assets and varying operating baselines without labelled fault information.

D. Singh, Durga Prasad Panday, Manish Kumar · 0 citations

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.