The invention belongs to the technical field of information safety and
signal processing, and particularly relates to a
time sequence dislocation analysis-based multi-mode
anomaly detection method and
system, and the method comprises the steps: synchronously collecting a multi-mode
time sequence signal, standardizing a
timestamp, and detecting or injecting a
time sequence anchor point event. And setting a multi-time scale window, calculating time sequence
dislocation feature vectors between
modes by taking the
anchor point as a reference, aggregating to form a multi-scale
feature set, and generating a comprehensive consistency
score. And calculating a stability evaluation
score based on the historical
feature vector sequence, and constructing a time sequence
dislocation manifold model by using normal samples through manifold learning. And mapping the multi-scale
feature vector to a model embedding space, calculating a distance with a statistical boundary, fusing the multi-scale distance, the comprehensive consistency
score and the stability score, and judging abnormity according to a preset rule. Normal time sequence fingerprints of each device and scene combination can be self-learned, so that inherent normal offset and abnormal offset can be distinguished, and content
camouflage and misleading are not easily caused.