{"id":"https://openalex.org/W7120965800","doi":"https://doi.org/10.1145/3788280","title":"Deep Learning for Collective Anomaly Detection","display_name":"Deep Learning for Collective Anomaly Detection","publication_year":2026,"publication_date":"2026-01-10","ids":{"openalex":"https://openalex.org/W7120965800","doi":"https://doi.org/10.1145/3788280"},"language":"en","primary_location":{"id":"doi:10.1145/3788280","doi":"https://doi.org/10.1145/3788280","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3788280","pdf_url":null,"source":{"id":"https://openalex.org/S157921468","display_name":"ACM Computing Surveys","issn_l":"0360-0300","issn":["0360-0300","1557-7341"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","dongbi-a","jufo-3","ki-jl-2","norway-2","poland-200","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Computing Surveys","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1145/3788280","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5022584952","display_name":"Dalila Khettaf","orcid":"https://orcid.org/0000-0003-2346-0475","observed_orcids":["https://orcid.org/0000-0003-2346-0475"]},"institutions":[{"id":"https://openalex.org/I178535277","display_name":"University of the West of England","ror":"https://ror.org/02nwg5t34","country_code":"GB","type":"education","lineage":["https://openalex.org/I178535277"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Dalila Khettaf","raw_affiliation_strings":["School of Computing and Creative Technology and Computer Science Research Centre, University of the West of England"],"raw_orcid":"https://orcid.org/0000-0003-2346-0475","affiliations":[{"raw_affiliation_string":"School of Computing and Creative Technology and Computer Science Research Centre, University of the West of England","institution_ids":["https://openalex.org/I178535277"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5066157144","display_name":"Djamel Djenouri","orcid":"https://orcid.org/0000-0001-9333-9860","observed_orcids":["https://orcid.org/0000-0001-9333-9860"]},"institutions":[{"id":"https://openalex.org/I178535277","display_name":"University of the West of England","ror":"https://ror.org/02nwg5t34","country_code":"GB","type":"education","lineage":["https://openalex.org/I178535277"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Djamel Djenouri","raw_affiliation_strings":["ACM Senior Member, School of Computing and Creative Technology and Computer Science Research Centre, University of the West of England"],"raw_orcid":"https://orcid.org/0000-0001-9333-9860","affiliations":[{"raw_affiliation_string":"ACM Senior Member, School of Computing and Creative Technology and Computer Science Research Centre, University of the West of England","institution_ids":["https://openalex.org/I178535277"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5006594746","display_name":"Zeinab Rezaeifar","orcid":"https://orcid.org/0000-0002-7561-7123","observed_orcids":["https://orcid.org/0000-0002-7561-7123"]},"institutions":[{"id":"https://openalex.org/I178535277","display_name":"University of the West of England","ror":"https://ror.org/02nwg5t34","country_code":"GB","type":"education","lineage":["https://openalex.org/I178535277"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Zeinab Rezaeifar","raw_affiliation_strings":["School of Computing and Creative Technology and Computer Science Research Centre, University of the West of England"],"raw_orcid":"https://orcid.org/0000-0002-7561-7123","affiliations":[{"raw_affiliation_string":"School of Computing and Creative Technology and Computer Science Research Centre, University of the West of England","institution_ids":["https://openalex.org/I178535277"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5057697626","display_name":"Youcef Djenouri","orcid":"https://orcid.org/0000-0003-0135-7450","observed_orcids":["https://orcid.org/0000-0003-0135-7450","https://orcid.org/0000-0001-5140-1224","https://orcid.org/0000-0001-9342-8759"]},"institutions":[{"id":"https://openalex.org/I2801380234","display_name":"University of South-Eastern Norway","ror":"https://ror.org/05ecg5h20","country_code":"NO","type":"education","lineage":["https://openalex.org/I2801380234"]},{"id":"https://openalex.org/I4210107808","display_name":"NORCE Research AS","ror":"https://ror.org/02gagpf75","country_code":"NO","type":"facility","lineage":["https://openalex.org/I4210107808"]}],"countries":["NO"],"is_corresponding":false,"raw_author_name":"Youcef Djenouri","raw_affiliation_strings":["University of South-Eastern Norway, Kongsberg, Norway and NORCE Norwegian Research Centre"],"raw_orcid":"https://orcid.org/0000-0003-0135-7450","affiliations":[{"raw_affiliation_string":"University of South-Eastern Norway, Kongsberg, Norway and NORCE Norwegian Research Centre","institution_ids":["https://openalex.org/I2801380234","https://openalex.org/I4210107808"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.4203,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":{"value":0.81074132,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":95},"biblio":{"volume":"58","issue":"8","first_page":"1","last_page":"34"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.0006000000284984708,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/deep-learning","display_name":"deep learning","score":0.75},{"id":"https://openalex.org/keywords/generative-models","display_name":"generative models","score":0.7789999842643738},{"id":"https://openalex.org/keywords/discriminative-models","display_name":"discriminative models","score":0.996999979019165},{"id":"https://openalex.org/keywords/hybrid-model","display_name":"hybrid model","score":0.8889999985694885},{"id":"https://openalex.org/keywords/deep-learning-architectures","display_name":"deep learning architectures","score":0.5799999833106995},{"id":"https://openalex.org/keywords/benchmark-dataset","display_name":"benchmark dataset","score":0.9210000038146973},{"id":"https://openalex.org/keywords/cybersecurity","display_name":"cybersecurity","score":0.9470000267028809},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.9390000104904175},{"id":"https://openalex.org/keywords/key-performance-indicators","display_name":"key performance indicators","score":0.9909999966621399}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8421000242233276},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.7778000235557556},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.7487999796867371},{"id":"https://openalex.org/C194789388","wikidata":"https://www.wikidata.org/wiki/Q17855283","display_name":"CAD","level":2,"score":0.6563000082969666},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6204000115394592},{"id":"https://openalex.org/C94124525","wikidata":"https://www.wikidata.org/wiki/Q912550","display_name":"Categorization","level":2,"score":0.611299991607666},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.5996999740600586},{"id":"https://openalex.org/C9652623","wikidata":"https://www.wikidata.org/wiki/Q190109","display_name":"Field (mathematics)","level":2,"score":0.588699996471405},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.521399974822998},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.515500009059906},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.4377000033855438},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4309000074863434},{"id":"https://openalex.org/C58642233","wikidata":"https://www.wikidata.org/wiki/Q8269924","display_name":"Taxonomy (biology)","level":2,"score":0.4154999852180481},{"id":"https://openalex.org/C2780616401","wikidata":"https://www.wikidata.org/wiki/Q1133673","display_name":"Cornerstone","level":2,"score":0.3490999937057495},{"id":"https://openalex.org/C204323151","wikidata":"https://www.wikidata.org/wiki/Q905424","display_name":"Range (aeronautics)","level":2,"score":0.34619998931884766},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.2687000036239624},{"id":"https://openalex.org/C2778464652","wikidata":"https://www.wikidata.org/wiki/Q309849","display_name":"Open research","level":2,"score":0.2655999958515167}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3788280","doi":"https://doi.org/10.1145/3788280","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3788280","pdf_url":null,"source":{"id":"https://openalex.org/S157921468","display_name":"ACM Computing Surveys","issn_l":"0360-0300","issn":["0360-0300","1557-7341"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","dongbi-a","jufo-3","ki-jl-2","norway-2","poland-200","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Computing Surveys","raw_type":"journal-article"},{"id":"pmh:oai:uwe-repository.worktribe.com:15618860","doi":null,"is_oa":true,"landing_page_url":"https://uwe-repository.worktribe.com/output/15618860","pdf_url":"https://uwe-repository.worktribe.com/preview/15685570/3788280.pdf","source":{"id":"https://openalex.org/S4306401464","display_name":"UWE Research Repository (UWE Bristol)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I178535277","host_organization_name":"University of the West of England","host_organization_lineage":["https://openalex.org/I178535277"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Journal Article"}],"best_oa_location":{"id":"doi:10.1145/3788280","doi":"https://doi.org/10.1145/3788280","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3788280","pdf_url":null,"source":{"id":"https://openalex.org/S157921468","display_name":"ACM Computing Surveys","issn_l":"0360-0300","issn":["0360-0300","1557-7341"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","dongbi-a","jufo-3","ki-jl-2","norway-2","poland-200","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Computing Surveys","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7120965800.pdf","grobid_xml":"https://content.openalex.org/works/W7120965800.grobid-xml"},"referenced_works_count":72,"referenced_works":["https://openalex.org/W1555199703","https://openalex.org/W1938811605","https://openalex.org/W2015172091","https://openalex.org/W2022322548","https://openalex.org/W2026297770","https://openalex.org/W2039157918","https://openalex.org/W2049058890","https://openalex.org/W2084789837","https://openalex.org/W2089554624","https://openalex.org/W2122646361","https://openalex.org/W2132870739","https://openalex.org/W2157339239","https://openalex.org/W2224609888","https://openalex.org/W2254258016","https://openalex.org/W2407991977","https://openalex.org/W2514072401","https://openalex.org/W2535642622","https://openalex.org/W2550328773","https://openalex.org/W2594434602","https://openalex.org/W2604247107","https://openalex.org/W2754804809","https://openalex.org/W2785259781","https://openalex.org/W2786827964","https://openalex.org/W2793387058","https://openalex.org/W2796013264","https://openalex.org/W2796992128","https://openalex.org/W2797697401","https://openalex.org/W2806029905","https://openalex.org/W2810550035","https://openalex.org/W2883284371","https://openalex.org/W2904539465","https://openalex.org/W2909550475","https://openalex.org/W2910068345","https://openalex.org/W2913761847","https://openalex.org/W2932013795","https://openalex.org/W2942467438","https://openalex.org/W2944817181","https://openalex.org/W2950361482","https://openalex.org/W2952263048","https://openalex.org/W2952589828","https://openalex.org/W2963783815","https://openalex.org/W2964336507","https://openalex.org/W3004207920","https://openalex.org/W3014106621","https://openalex.org/W3024633170","https://openalex.org/W3025371672","https://openalex.org/W3040266635","https://openalex.org/W3043674422","https://openalex.org/W3044129898","https://openalex.org/W3094595905","https://openalex.org/W3101969501","https://openalex.org/W3130499959","https://openalex.org/W3153993968","https://openalex.org/W3158385740","https://openalex.org/W3170851865","https://openalex.org/W3174208482","https://openalex.org/W3182506426","https://openalex.org/W3183438869","https://openalex.org/W3202913553","https://openalex.org/W3204771038","https://openalex.org/W3207058943","https://openalex.org/W3208270664","https://openalex.org/W4200152289","https://openalex.org/W4213258821","https://openalex.org/W4225663043","https://openalex.org/W4236877820","https://openalex.org/W4285082635","https://openalex.org/W4320167631","https://openalex.org/W4380758675","https://openalex.org/W4385337001","https://openalex.org/W4402056503","https://openalex.org/W4402353796"],"related_works":["https://openalex.org/W2913761847","https://openalex.org/W3040266635","https://openalex.org/W2910068345","https://openalex.org/W4412030696","https://openalex.org/W4404862525","https://openalex.org/W7131267342","https://openalex.org/W3089028909","https://openalex.org/W4417203852","https://openalex.org/W7220862096","https://openalex.org/W4412412322"],"abstract_inverted_index":{"Anomaly":[0],"detection":[1,53],"has":[2],"been":[3,30],"a":[4,12,41,120],"cornerstone":[5],"of":[6,17,43,123,136,163,172],"research":[7,181],"across":[8],"diverse":[9],"disciplines,":[10],"remaining":[11],"critical":[13],"and":[14,61,93,128,138,152,161,176,179],"evolving":[15],"field":[16],"study":[18],"for":[19,36,72,148],"several":[20,23],"decades.":[21],"While":[22],"approaches,":[24],"including":[25,125],"deep":[26,117],"learning":[27,118],"(DL),":[28],"have":[29],"explored":[31],"to":[32,69,79,100,168],"design":[33],"general":[34],"solutions":[35],"anomaly":[37,52],"detection,":[38],"there":[39],"is":[40,77],"lack":[42],"structured":[44],"survey":[45],"articles":[46],"on":[47,84,109],"the":[48,63,94,113,144,159,164,170,177],"collective":[49],"(or":[50],"group)":[51],"problem":[54,171],"(CAD).":[55],"This":[56],"article":[57],"fills":[58],"this":[59],"gap":[60],"presents":[62],"first":[64],"comprehensive":[65],"review":[66,106],"dedicated":[67],"exclusively":[68],"DL-based":[70],"methods":[71,82,95],"CAD.":[73],"A":[74],"two-level":[75],"taxonomy":[76],"proposed":[78],"categorize":[80],"CAD":[81,110,137,149,173],"based":[83],"their":[85,101],"underlying":[86],"algorithms":[87],"into":[88],"generative,":[89],"discriminative,":[90],"or":[91],"hybrid,":[92],"are":[96,141,150,174,183],"further":[97],"classified":[98],"according":[99],"DL":[102],"architecture.":[103],"The":[104],"literature":[105],"we":[107],"conducted":[108],"reveals":[111],"that":[112],"existing":[114],"approaches":[115],"utilizing":[116],"address":[119],"wide":[121],"range":[122],"applications,":[124],"cybersecurity,":[126],"IoT,":[127],"key":[129],"performance":[130],"indicators":[131],"(KPIs).":[132],"Different":[133],"application":[134,156],"domains":[135],"benchmark":[139],"datasets":[140,147],"discussed.":[142,184],"Moreover,":[143],"commonly":[145],"used":[146,167],"described":[151],"discussed":[153],"from":[154],"different":[155,165],"scenarios.":[157],"Finally,":[158],"limitations":[160],"drawbacks":[162],"trends":[166],"solve":[169],"outlined,":[175],"challenges":[178],"future":[180],"directions":[182]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-11-10T11:39:43.021295","created_date":"2026-01-11T00:00:00"}