{"id":"https://openalex.org/W2947104347","doi":"https://doi.org/10.1145/3312739","title":"Anomaly Detection Methods for Categorical Data","display_name":"Anomaly Detection Methods for Categorical Data","publication_year":2019,"publication_date":"2019-05-30","ids":{"openalex":"https://openalex.org/W2947104347","doi":"https://doi.org/10.1145/3312739","mag":"2947104347"},"language":"en","primary_location":{"id":"doi:10.1145/3312739","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3312739","pdf_url":null,"source":{"id":"https://openalex.org/S157921468","display_name":"ACM Computing Surveys","issn_l":"0360-0300","issn":["0360-0300","1557-7341"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Computing Surveys","raw_type":"journal-article"},"type":"review","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5028593139","display_name":"Ayman Taha","orcid":"https://orcid.org/0000-0001-5586-6889"},"institutions":[{"id":"https://openalex.org/I145487455","display_name":"Cairo University","ror":"https://ror.org/03q21mh05","country_code":"EG","type":"education","lineage":["https://openalex.org/I145487455"]}],"countries":["EG"],"is_corresponding":true,"raw_author_name":"Ayman Taha","raw_affiliation_strings":["Faculty of Computers and Information, Cairo University, Giza, Egypt"],"affiliations":[{"raw_affiliation_string":"Faculty of Computers and Information, Cairo University, Giza, Egypt","institution_ids":["https://openalex.org/I145487455"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5083267470","display_name":"Ali S. Hadi","orcid":"https://orcid.org/0000-0002-1533-8333"},"institutions":[{"id":"https://openalex.org/I205783295","display_name":"Cornell University","ror":"https://ror.org/05bnh6r87","country_code":"US","type":"education","lineage":["https://openalex.org/I205783295"]},{"id":"https://openalex.org/I80693520","display_name":"American University in Cairo","ror":"https://ror.org/0176yqn58","country_code":"EG","type":"education","lineage":["https://openalex.org/I80693520"]}],"countries":["EG","US"],"is_corresponding":false,"raw_author_name":"Ali S. Hadi","raw_affiliation_strings":["American University in Cairo, Egypt, and Cornell University, Ithaca, NY, USA"],"affiliations":[{"raw_affiliation_string":"American University in Cairo, Egypt, and Cornell University, Ithaca, NY, USA","institution_ids":["https://openalex.org/I80693520","https://openalex.org/I205783295"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5028593139"],"corresponding_institution_ids":["https://openalex.org/I145487455"],"apc_list":null,"apc_paid":null,"fwci":6.6478,"has_fulltext":false,"cited_by_count":91,"citation_normalized_percentile":{"value":0.97323036,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":100},"biblio":{"volume":"52","issue":"2","first_page":"1","last_page":"35"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9970999956130981,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11819","display_name":"Data-Driven Disease Surveillance","score":0.9926000237464905,"subfield":{"id":"https://openalex.org/subfields/2713","display_name":"Epidemiology"},"field":{"id":"https://openalex.org/fields/27","display_name":"Medicine"},"domain":{"id":"https://openalex.org/domains/4","display_name":"Health Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/categorical-variable","display_name":"Categorical variable","score":0.9534646272659302},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.8435903787612915},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7539715766906738},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.5685461163520813},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.534339189529419},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4823991060256958},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.4422374963760376},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.37183091044425964}],"concepts":[{"id":"https://openalex.org/C5274069","wikidata":"https://www.wikidata.org/wiki/Q2285707","display_name":"Categorical variable","level":2,"score":0.9534646272659302},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.8435903787612915},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7539715766906738},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.5685461163520813},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.534339189529419},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4823991060256958},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.4422374963760376},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.37183091044425964},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C26873012","wikidata":"https://www.wikidata.org/wiki/Q214781","display_name":"Condensed matter physics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3312739","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3312739","pdf_url":null,"source":{"id":"https://openalex.org/S157921468","display_name":"ACM Computing Surveys","issn_l":"0360-0300","issn":["0360-0300","1557-7341"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Computing Surveys","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.7599999904632568,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":197,"referenced_works":["https://openalex.org/W42722137","https://openalex.org/W52010771","https://openalex.org/W74109856","https://openalex.org/W93424348","https://openalex.org/W127398482","https://openalex.org/W161610290","https://openalex.org/W176952057","https://openalex.org/W182451476","https://openalex.org/W1031497972","https://openalex.org/W1481707143","https://openalex.org/W1482564064","https://openalex.org/W1489608363","https://openalex.org/W1492581097","https://openalex.org/W1499399937","https://openalex.org/W1506285740","https://openalex.org/W1530232915","https://openalex.org/W1532325895","https://openalex.org/W1557977144","https://openalex.org/W1561876596","https://openalex.org/W1562135275","https://openalex.org/W1572006309","https://openalex.org/W1583837637","https://openalex.org/W1586776267","https://openalex.org/W1594509342","https://openalex.org/W1604017798","https://openalex.org/W1737603075","https://openalex.org/W1763728792","https://openalex.org/W1826511750","https://openalex.org/W1852046123","https://openalex.org/W1874523587","https://openalex.org/W1879274573","https://openalex.org/W1887038067","https://openalex.org/W1927233378","https://openalex.org/W1944649467","https://openalex.org/W1966147156","https://openalex.org/W1970655212","https://openalex.org/W1972381050","https://openalex.org/W1972626687","https://openalex.org/W1976625337","https://openalex.org/W1977994906","https://openalex.org/W1980262437","https://openalex.org/W1980452149","https://openalex.org/W1981745143","https://openalex.org/W1982672081","https://openalex.org/W1988177629","https://openalex.org/W1989870481","https://openalex.org/W1990733382","https://openalex.org/W1994212840","https://openalex.org/W1995875735","https://openalex.org/W1998451569","https://openalex.org/W1999612973","https://openalex.org/W2002374079","https://openalex.org/W2002517143","https://openalex.org/W2007087405","https://openalex.org/W2010921848","https://openalex.org/W2012836768","https://openalex.org/W2014471490","https://openalex.org/W2014753399","https://openalex.org/W2014944622","https://openalex.org/W2015887370","https://openalex.org/W2023075593","https://openalex.org/W2026493302","https://openalex.org/W2032375682","https://openalex.org/W2034035449","https://openalex.org/W2038819732","https://openalex.org/W2040646033","https://openalex.org/W2040661907","https://openalex.org/W2041404167","https://openalex.org/W2042678829","https://openalex.org/W2045012776","https://openalex.org/W2050418211","https://openalex.org/W2050969847","https://openalex.org/W2059728306","https://openalex.org/W2061122559","https://openalex.org/W2061240327","https://openalex.org/W2065900908","https://openalex.org/W2068383009","https://openalex.org/W2070888554","https://openalex.org/W2074250989","https://openalex.org/W2079557269","https://openalex.org/W2084512860","https://openalex.org/W2087615914","https://openalex.org/W2089554624","https://openalex.org/W2093168265","https://openalex.org/W2093859880","https://openalex.org/W2095345875","https://openalex.org/W2097241863","https://openalex.org/W2097627964","https://openalex.org/W2104715398","https://openalex.org/W2105642232","https://openalex.org/W2105940436","https://openalex.org/W2107554480","https://openalex.org/W2111759429","https://openalex.org/W2112657736","https://openalex.org/W2115627867","https://openalex.org/W2117618130","https://openalex.org/W2117672932","https://openalex.org/W2117891917","https://openalex.org/W2118882002","https://openalex.org/W2121710227","https://openalex.org/W2121720842","https://openalex.org/W2122053769","https://openalex.org/W2122127505","https://openalex.org/W2122646361","https://openalex.org/W2124536999","https://openalex.org/W2127971792","https://openalex.org/W2128602454","https://openalex.org/W2129281431","https://openalex.org/W2132870739","https://openalex.org/W2133350412","https://openalex.org/W2134532107","https://openalex.org/W2136369688","https://openalex.org/W2137130182","https://openalex.org/W2138029461","https://openalex.org/W2139721647","https://openalex.org/W2140978634","https://openalex.org/W2142889610","https://openalex.org/W2143687373","https://openalex.org/W2144182447","https://openalex.org/W2147620601","https://openalex.org/W2148610006","https://openalex.org/W2151326673","https://openalex.org/W2157477650","https://openalex.org/W2157564217","https://openalex.org/W2161084585","https://openalex.org/W2161369142","https://openalex.org/W2161805882","https://openalex.org/W2162774438","https://openalex.org/W2163058140","https://openalex.org/W2163557584","https://openalex.org/W2164929738","https://openalex.org/W2165116724","https://openalex.org/W2166377520","https://openalex.org/W2170902455","https://openalex.org/W2172852798","https://openalex.org/W2175604593","https://openalex.org/W2181499375","https://openalex.org/W2181718469","https://openalex.org/W2184661813","https://openalex.org/W2188425697","https://openalex.org/W2195555646","https://openalex.org/W2212381007","https://openalex.org/W2219140802","https://openalex.org/W2224609888","https://openalex.org/W2253230473","https://openalex.org/W2262232454","https://openalex.org/W2273892608","https://openalex.org/W2278186031","https://openalex.org/W2281706614","https://openalex.org/W2282861635","https://openalex.org/W2288636546","https://openalex.org/W2288877751","https://openalex.org/W2318032547","https://openalex.org/W2319745077","https://openalex.org/W2338990760","https://openalex.org/W2394993243","https://openalex.org/W2427606719","https://openalex.org/W2437618134","https://openalex.org/W2471942520","https://openalex.org/W2480455979","https://openalex.org/W2497605700","https://openalex.org/W2503949733","https://openalex.org/W2514717448","https://openalex.org/W2517486107","https://openalex.org/W2523635132","https://openalex.org/W2531563875","https://openalex.org/W2540337963","https://openalex.org/W2576694568","https://openalex.org/W2754988379","https://openalex.org/W2769984510","https://openalex.org/W2801713330","https://openalex.org/W2810169022","https://openalex.org/W2886661658","https://openalex.org/W2950186804","https://openalex.org/W2963395938","https://openalex.org/W3028818932","https://openalex.org/W3144010526","https://openalex.org/W3144740773","https://openalex.org/W3187691126","https://openalex.org/W3201248216","https://openalex.org/W4211139099","https://openalex.org/W4213245422","https://openalex.org/W4226280022","https://openalex.org/W4235844763","https://openalex.org/W4236048739","https://openalex.org/W4253461361","https://openalex.org/W4254182148","https://openalex.org/W4255833381","https://openalex.org/W4285719527","https://openalex.org/W4287557701","https://openalex.org/W4293159471","https://openalex.org/W4301159042","https://openalex.org/W6650784883","https://openalex.org/W6670309985","https://openalex.org/W6682978191","https://openalex.org/W6720492077","https://openalex.org/W6727311480"],"related_works":["https://openalex.org/W2806741695","https://openalex.org/W4290647774","https://openalex.org/W3189286258","https://openalex.org/W3207797160","https://openalex.org/W3210364259","https://openalex.org/W4300558037","https://openalex.org/W2667207928","https://openalex.org/W2912112202","https://openalex.org/W4377864969","https://openalex.org/W3120251014"],"abstract_inverted_index":{"Anomaly":[0],"detection":[1,72,89,101,150,177,211,242,347],"has":[2,11,23,45,54,76],"numerous":[3,28],"applications":[4,30,297],"in":[5,27,42,50,69,73,92,137,153,159,179,214,217,295,299,330,348],"diverse":[6],"fields.":[7],"For":[8,236],"example,":[9],"it":[10,309,319,325,329],"been":[12,25,157],"widely":[13],"used":[14,26],"for":[15,209],"discovering":[16],"network":[17],"intrusions":[18],"and":[19,53,60,114,131,195,220,244,249,265,327,340],"malicious":[20],"events.":[21],"It":[22],"also":[24,292],"other":[29],"such":[31],"as":[32,81,126],"identifying":[33,105,129],"medical":[34],"malpractice":[35],"or":[36,191],"credit":[37],"fraud.":[38],"Detection":[39],"of":[40,66,90,151,171,212,232,260,277,285,315,344],"anomalies":[41,91,152,213,233],"quantitative":[43,84,142],"data":[44,68,75,94,139,155,216,301],"received":[46,77],"a":[47,55,96,106,168],"considerable":[48],"attention":[49,80],"the":[51,62,149,160,172,175,188,192,210,229,247,258,275,283,305,313,316,337,341,345],"literature":[52,190],"venerable":[56],"history.":[57],"By":[58],"contrast,":[59],"despite":[61],"widespread":[63],"availability":[64],"use":[65],"categorical":[67,74,93,138,154,180,215,349],"practice,":[70],"anomaly":[71,100,176,241,346],"relatively":[78],"little":[79],"compared":[82,140],"to":[83,282],"data.":[85,143,181,350],"This":[86,199],"is":[87,95,272,291,310,320],"because":[88,274],"challenging":[97],"problem.":[98],"Some":[99],"techniques":[102],"depend":[103],"on":[104,148,174,186,228],"representative":[107],"pattern":[108,123],"then":[109,245,322],"measuring":[110,132],"distances":[111,133],"between":[112],"objects":[113],"this":[115,122,164,331],"pattern.":[116],"Objects":[117],"that":[118],"are":[119,124,134,280],"far":[120],"from":[121],"declared":[125],"anomalies.":[127],"However,":[128],"patterns":[130],"not":[135],"easy":[136],"with":[141],"Fortunately,":[144],"several":[145],"papers":[146],"focussing":[147],"have":[156],"published":[158],"recent":[161],"literature.":[162,198],"In":[163,333],"article,":[165],"we":[166,239,323,335],"provide":[167],"comprehensive":[169],"review":[170,183,200,206],"research":[173],"problem":[178],"Previous":[182],"articles":[184],"focus":[185],"either":[187],"statistics":[189],"machine":[193],"learning":[194],"computer":[196],"science":[197],"article":[201],"combines":[202],"both":[203,218],"literatures.":[204],"We":[205,253,303],"36":[207],"methods":[208,279],"literatures":[219],"classify":[221],"them":[222],"into":[223],"12":[224],"different":[225],"categories":[226],"based":[227],"conceptual":[230],"definition":[231],"they":[234],"use.":[235],"each":[237,262],"approach,":[238],"survey":[240],"methods,":[243],"show":[246],"similarities":[248],"differences":[250],"among":[251],"them.":[252],"emphasize":[254],"two":[255],"important":[256,294],"issues,":[257],"number":[259],"parameters":[261],"method":[263],"requires":[264],"its":[266],"time":[267,289,306],"complexity.":[268],"The":[269,288],"first":[270],"issue":[271],"critical,":[273],"performance":[276],"these":[278,286],"sensitive":[281],"choice":[284],"parameters.":[287],"complexity":[290,307],"very":[293],"real":[296],"especially":[298],"big":[300],"applications.":[302],"report":[304,328],"if":[308],"reported":[311],"by":[312],"authors":[314],"methods.":[317],"If":[318],"not,":[321],"derive":[324],"ourselves":[326],"article.":[332],"addition,":[334],"discuss":[336],"common":[338],"problems":[339],"future":[342],"directions":[343]},"counts_by_year":[{"year":2026,"cited_by_count":4},{"year":2025,"cited_by_count":13},{"year":2024,"cited_by_count":11},{"year":2023,"cited_by_count":17},{"year":2022,"cited_by_count":12},{"year":2021,"cited_by_count":19},{"year":2020,"cited_by_count":11},{"year":2019,"cited_by_count":3},{"year":2012,"cited_by_count":1}],"updated_date":"2026-04-22T08:38:42.863108","created_date":"2025-10-10T00:00:00"}
