Distilling Multi-Teacher Scoring Principles for Unsupervised Time Series Anomaly Detection
Summary
AnoMix 提出一种多教师排序蒸馏方法(CoRank),将多个异构无监督时间序列异常检测器蒸馏为单一轻量学生模型(<80k 参数),在七个基准数据集上优于单个检测器和静态分数集成,其零样本变体还能在未见数据集上超越大型时间序列基础模型。
View Cached Full Text
Cached at: 10/22/26, 04:19 PM
# Distilling Multi-Teacher Scoring Principles for Unsupervised Time Series Anomaly Detection Source: [https://arxiv.org/html/2610.29063](https://arxiv.org/html/2610.29063) Dongchan Cho\*Affiliation:Industrial AI Lab, SimPlatform Co\. Ltd\. Affiliate Research Institute [cdc0213@simplatform\.com](mailto:[email protected]) \*Corresponding author\.Jiho HanAffiliation:Industrial AI Lab, SimPlatform Co\. Ltd\. Affiliate Research Institute [jihohan@simplatform\.com](mailto:[email protected])Juwon HwangAffiliation:Industrial AI Lab, SimPlatform Co\. Ltd\. Affiliate Research Institute [jwhwang@simplatform\.com](mailto:[email protected])Changhee MinAffiliation:Industrial AI Lab, SimPlatform Co\. Ltd\. Affiliate Research Institute [chmin@simplatform\.com](mailto:[email protected])Minsang KimAffiliation:Industrial AI Lab, SimPlatform Co\. Ltd\. Affiliate Research Institute [mskim@simplatform\.com](mailto:[email protected])Namsoon JungAffiliation:Industrial AI Lab, SimPlatform Co\. Ltd\. Affiliate Research Institute [nsj@simplatform\.com](mailto:[email protected]) ###### Abstract Time series anomalies take diverse forms, and individual detectors encode different anomaly scoring principles that rarely cover all anomaly types\. Recent unsupervised time\-series anomaly detectors provide complementary scoring signals, yet deploying them as an ensemble preserves the inference and maintenance cost of every individual detector\. We study whether heterogeneous teacher detectors can be distilled into a single lightweight detector in the unsupervised setting, where no anomaly labels are available to define a shared target\.AnoMixaddresses this by extracting weak pairwise supervision from the training\-set anomaly scores of frozen teachers\. It normalizes each teacher score sequence independently and trains the student with CoRank, a multi\-teacher ranking\-distillation objective that converts teacher score gaps into pairwise supervision through teacher consensus\. Across seven benchmark datasets, AnoMix successfully integrates complementary teacher scoring principles into a single deployable model, improving over individual detectors and static score ensembles while using a compact student with under 80k parameters on the benchmark settings\. A zero\-shot variant further shows that the distilled ranking signal transfers to unseen datasets and can outperform large pretrained time\-series foundation models for anomaly detection\. ## 1Introduction Time series anomaly detection \(TSAD\) is a critical problem in industrial monitoring\[[1](https://arxiv.org/html/2610.29063#bib.bib1)\], cyber\-physical systems\[[2](https://arxiv.org/html/2610.29063#bib.bib2)\], and sensor analytics\[[3](https://arxiv.org/html/2610.29063#bib.bib3),[4](https://arxiv.org/html/2610.29063#bib.bib4),[5](https://arxiv.org/html/2610.29063#bib.bib5)\]\. Because anomalies are open\-set events and anomaly labels are scarce, TSAD is often addressed in an unsupervised setting\. In this setting, the anomaly criterion is ambiguous, and a detector must infer which temporal deviations should be treated as abnormal from the training series alone\. Recent benchmark studies\[[6](https://arxiv.org/html/2610.29063#bib.bib6),[7](https://arxiv.org/html/2610.29063#bib.bib7),[8](https://arxiv.org/html/2610.29063#bib.bib8)\]highlight that this ambiguity leads different detectors to define and detect anomalies under their own criteria, with no single detector dominating across datasets\. Together, these observations suggest that improving TSAD performance requires using multiple anomaly\-scoring principles\. Existing TSAD detectors already provide a rich source of such complementary scoring principles\. Reconstruction\-based models emphasize reconstruction failure\[[9](https://arxiv.org/html/2610.29063#bib.bib9),[3](https://arxiv.org/html/2610.29063#bib.bib3)\], forecasting models emphasize predictive residuals\[[10](https://arxiv.org/html/2610.29063#bib.bib10),[11](https://arxiv.org/html/2610.29063#bib.bib11)\], latent\-space models emphasize deviation from compact normal representations\[[12](https://arxiv.org/html/2610.29063#bib.bib12),[13](https://arxiv.org/html/2610.29063#bib.bib13)\], and association\-based models emphasize structural and temporal dependency mismatch\[[14](https://arxiv.org/html/2610.29063#bib.bib14),[15](https://arxiv.org/html/2610.29063#bib.bib15)\]\. Because their scores reflect different abnormality criteria, these detectors can complement one another\[[16](https://arxiv.org/html/2610.29063#bib.bib16)\]\. A direct way to exploit this complementarity is to deploy them together and combine their scores\. However, such ensembles preserve the inference cost and maintenance overhead of all individual models\[[17](https://arxiv.org/html/2610.29063#bib.bib17),[18](https://arxiv.org/html/2610.29063#bib.bib18),[19](https://arxiv.org/html/2610.29063#bib.bib19)\]\. A more practical goal is to transfer the complementary scoring principles into one lightweight student\. *Knowledge distillation*appears to be a natural route toward this goal because teachers can be used during training while only the student is deployed at inference\[[20](https://arxiv.org/html/2610.29063#bib.bib20),[21](https://arxiv.org/html/2610.29063#bib.bib21)\]\. However, applying distillation to unsupervised TSAD raises a more fundamental question than how to compress a model: what exactly should be distilled? In supervised classification, teacher and student models predict probabilities over the same set of classes, and ground\-truth labels anchor the meaning of the teacher signal\[[21](https://arxiv.org/html/2610.29063#bib.bib21)\]\. In unsupervised TSAD, neither condition holds\. Although each teacher outputs anomaly scores, the scores are continuous and detector\-specific, and the label\-free setting provides no direct way to verify whether they are correct\. When multiple teachers are used, this mismatch becomes more pronounced because their numerical magnitudes reflect different abnormality criteria and different calibrations\. Therefore, direct score regression is structurally mismatched with this setting, as it asks one student to fit multiple teacher\-specific score scales as if they formed a single consistent target\. Our key insight is that imperfect teacher scores can still provide useful weak supervision through pairwise anomaly comparisons rather than through pointwise regression targets\. Although two teachers may use different score scales and abnormality criteria, they can still agree that one time point appears more anomalous than another\. We call this relation a pairwise*anomaly preference*\. Such preferences provide a more stable supervision form than pointwise regression targets because they compare samples within each teacher score sequence instead of requiring a shared calibrated score scale across teachers\. Moreover, when multiple heterogeneous teachers support the same pairwise direction, their agreement suggests that the comparison is informative\. Thus, unsupervised TSAD distillation becomes feasible by training a single student to learn reliable pairwise anomaly preferences from multi\-teacher score sequences computed on the training data\. Building on this insight, we introduceAnoMix, a label\-free multi\-teacher distillation framework for learning a neural anomaly\-scoring function\. Unlike conventional TSAD models that derive anomaly scores from reconstruction, forecasting, association, or representation discrepancies, AnoMix trains a student to directly output the anomaly score used at inference\. Since no labeled anomaly\-score target exists, AnoMix supervises this scalar score through pairwise anomaly preferences derived from frozen teacher score sequences\. First, AnoMix normalizes each frozen teacher score sequence independently and then trains a compact student using*CoRank*, a consensus\-ranking objective over mini\-batch time\-point pairs\. CoRank constructs consensus support from teacher\-level score gaps, assigns a consensus direction induced by normalized teacher differences, and weights each comparison by consensus confidence\. The student is therefore not asked to reproduce teacher\-specific pointwise score magnitudes\. Instead, it learns a neural anomaly\-scoring function aligned with the teacher\-consensus ordering induced by CoRank\. Our contributions are as follows: - •We formulate label\-free multi\-teacher TSAD distillation as direct anomaly\-score prediction for deployment, where a lightweight student learns a neural anomaly\-scoring function from heterogeneous unsupervised teacher score sequences\. - •We propose AnoMix, which turns normalized teacher score sequences computed on the training data into pairwise anomaly\-preference supervision, allowing a single student to learn anomaly\-scoring principles without regressing to teacher\-specific pointwise scores\. - •Across TSAD benchmark datasets and the zero\-shot cross\-dataset setting, AnoMix and AnoMix\-ZS achieve strong performance against individual detectors, static score\-ensemble baselines, and pretrained foundation\-model baselines, demonstrating that pairwise anomaly preferences from multiple teachers can be distilled into a single lightweight student\. ## 2Related Work #### Knowledge Distillation\. Knowledge distillation \(KD\) was originally introduced as a way to compress a large teacher into a compact student by matching softened output distributions\[[21](https://arxiv.org/html/2610.29063#bib.bib21)\]\. Later KD methods broadened the transferred signal from logits to intermediate features\[[22](https://arxiv.org/html/2610.29063#bib.bib22)\], contrastive representations\[[23](https://arxiv.org/html/2610.29063#bib.bib23)\], and sample relations such as activation similarities, similarity rankings, and relational structures\[[24](https://arxiv.org/html/2610.29063#bib.bib24),[25](https://arxiv.org/html/2610.29063#bib.bib25),[26](https://arxiv.org/html/2610.29063#bib.bib26)\]\. Multi\-teacher KD further aggregates supervision from several teachers into a single student\[[20](https://arxiv.org/html/2610.29063#bib.bib20)\]\. Together, these lines show that KD need not be limited to output matching, but they still typically assume a well\-defined transfer target\. For anomaly detection, distillation has been explored primarily in the image domain, often with a single teacher and with teacher–student discrepancy itself serving as the anomaly signal\[[27](https://arxiv.org/html/2610.29063#bib.bib27),[28](https://arxiv.org/html/2610.29063#bib.bib28)\]\. In time\-series anomaly detection, distillation remains relatively underexplored\. Recent work such as AnomalyLLM studies single\-teacher transfer through feature mimicry and discrepancy\-based detection\[[29](https://arxiv.org/html/2610.29063#bib.bib29)\]\. However, prior work does not address the AnoMix setting of label\-free transfer from heterogeneous TSAD teachers to a single student\. #### Learning\-to\-Rank Methods\. Learning\-to\-rank methods learn scoring functions from relative ordering constraints rather than calibrated target values\. Existing ranking objectives, however, typically assume that the target ordering is already available\. Pairwise methods such as RankNet\[[30](https://arxiv.org/html/2610.29063#bib.bib30)\]optimize pairwise preferences or teacher\-induced orderings, max\-margin ranking losses\[[31](https://arxiv.org/html/2610.29063#bib.bib31)\]impose ordered margin constraints, and listwise methods such as ListNet\[[32](https://arxiv.org/html/2610.29063#bib.bib32)\]optimize an ordering distribution over a set of samples\. More recent differentiable sorting and ranking surrogates\[[33](https://arxiv.org/html/2610.29063#bib.bib33)\]further make rank\-based objectives compatible with gradient optimization\. Relation\-based distillation similarly transfers sample\-level structure rather than only pointwise outputs\[[24](https://arxiv.org/html/2610.29063#bib.bib24),[25](https://arxiv.org/html/2610.29063#bib.bib25),[26](https://arxiv.org/html/2610.29063#bib.bib26)\]\. These methods primarily specify how to optimize a given target ordering or relation\. AnoMix addresses a different setting\. In our setting, the target relation is not given by labels or by a single calibrated teacher\. AnoMix must construct pairwise supervision from heterogeneous teacher score sequences\. Figure 1:Training overview of AnoMix\. \(a\) Frozen teachers \(\) score the unlabeled training series, followed by score normalization\. \(b\) CoRank selects informative pairs and derives their consensus direction and confidence\. \(c\) A trainable student \(\) learns the pairwise ordering through a confidence\-weighted loss\. ## 3Methodology Figure[1](https://arxiv.org/html/2610.29063#S2.F1)follows a concrete pair of endpoints through AnoMix\. In panel \(a\), each teacherfmf\_\{m\}produces raw anomaly scoreszi\(m\),zj\(m\)z\_\{i\}^\{\(m\)\},z\_\{j\}^\{\(m\)\}aligned with endpointsi,ji,jof the unlabeled training series, with its parameters fixed throughout student training\. Per\-teacher min–max normalization using training statistics yields the scoresz~i\(m\),z~j\(m\)\\tilde\{z\}\_\{i\}^\{\(m\)\},\\tilde\{z\}\_\{j\}^\{\(m\)\}in rowmmof the figure\. In panel \(b\), CoRank retains the pair if any teacher provides a sufficiently large score gap, combines the signed gaps into a consensus direction, and measures their agreement as a confidence weight\. The illustrated pair remains informative despite one opposing teacher: its consensus favorsiioverjjwith confidence2/32/3\. In panel \(c\), the same lightweight student processes both windows and learns this preference through a confidence\-weighted pairwise loss\. At inference, all teachers are discarded, leaving only the student to produce pointwise anomaly scores\. A detailed rationale for CoRank\-based multi\-teacher ranking distillation is provided in Appendix[A](https://arxiv.org/html/2610.29063#A1)\. ### 3\.1Problem Setup Let𝐗train=\(𝐱1,…,𝐱T\)∈ℝT×D\\mathbf\{X\}\_\{\\mathrm\{train\}\}=\(\\mathbf\{x\}\_\{1\},\\dots,\\mathbf\{x\}\_\{T\}\)\\in\\mathbb\{R\}^\{T\\times D\}denote an unlabeled multivariate training time series\. For each endpointt≥Lt\\geq L, we form a sliding\-window sample𝐖t=\(𝐱t−L\+1,…,𝐱t\)∈ℝL×D\\mathbf\{W\}\_\{t\}=\(\\mathbf\{x\}\_\{t\-L\+1\},\\dots,\\mathbf\{x\}\_\{t\}\)\\in\\mathbb\{R\}^\{L\\times D\}\. We assume access toMMfrozen pre\-trained teacher detectors\{f1,…,fM\}\\\{f\_\{1\},\\dots,f\_\{M\}\\\}\. Each teacher provides an anomaly scorezt\(m\)z\_\{t\}^\{\(m\)\}aligned with endpointtt, and these teacher scores are normalized independently\. The student takes the sliding\-window sample𝐖t\\mathbf\{W\}\_\{t\}as input and outputs a scalar predictionz^t\\hat\{z\}\_\{t\}for the same endpoint\. No anomaly labels are used, and the normalized teacher scores provide the only supervision signal for training\. After training, the teacher detectors are discarded, and the student alone processes each test window to produce a scalar anomaly score\. The goal is to learn a single deployable student from unlabeled data and frozen teacher score sequences by capturing pairwise anomaly preferences supported by multiple teachers\. ### 3\.2Teacher Score Normalization Each teacher produces anomaly scores on a detector\-specific scale\. We therefore min\-max normalize each teacher score sequence independently using only training\-set statistics\. This yields normalized teacher scoresz~t\(m\)∈\[0,1\]\\tilde\{z\}\_\{t\}^\{\(m\)\}\\in\[0,1\]on the training series\. This preserves within\-teacher ordering while reducing cross\-teacher scale mismatch for distillation\. Although teacher score normalization does not make teacher scores a reliable shared regression target, it makes teacher\-specific score gaps comparable enough for pairwise supervision because their possible ranges are aligned\. AnoMix then computes pairwise teacher score gaps from these normalized scores\. These gap magnitudes are used later to select informative pairs and weight pairwise comparisons derived from teacher scores\. ### 3\.3Student Architecture We use a lightweight causal temporal convolutional network \(TCN\) student with one scalar output\. This architecture matches the endpoint\-based scoring protocol, where each input window is assigned the anomaly score of its final timestep\. Given a window𝐖t\\mathbf\{W\}\_\{t\}, a linear projection maps it to𝐇\(0\)∈ℝL×H\\mathbf\{H\}^\{\(0\)\}\\in\\mathbb\{R\}^\{L\\times H\},NNcausal temporal blocks\[[34](https://arxiv.org/html/2610.29063#bib.bib34)\]produce𝐇\(N\)\\mathbf\{H\}^\{\(N\)\}, and the endpoint representation𝐡t=𝐇L\(N\)∈ℝH\\mathbf\{h\}\_\{t\}=\\mathbf\{H\}^\{\(N\)\}\_\{L\}\\in\\mathbb\{R\}^\{H\}is mapped to a scalar scorez^t=𝐰⊤𝐡t\+b\\hat\{z\}\_\{t\}=\\mathbf\{w\}^\{\\top\}\\mathbf\{h\}\_\{t\}\+b\. This lightweight design helps separate the effect of AnoMix’s multi\-teacher ranking distillation from gains due to a complex student architecture\. Architectural details for both the main student and the zero\-shot variant are provided in Appendix[B](https://arxiv.org/html/2610.29063#A2)\. ### 3\.4CoRank Loss The main challenge is not choosing a ranking loss, but constructing reliable ranking supervision from heterogeneous teachers\. CoRank therefore uses a standard pairwise logistic form, but differs from conventional ranking losses in the situation it addresses\. RankNet\[[30](https://arxiv.org/html/2610.29063#bib.bib30)\], max\-margin ranking\[[31](https://arxiv.org/html/2610.29063#bib.bib31)\], listwise ranking\[[32](https://arxiv.org/html/2610.29063#bib.bib32)\], and differentiable sorting and ranking objectives\[[33](https://arxiv.org/html/2610.29063#bib.bib33)\]can be considered when a target ordering is already available\. In AnoMix, no anomaly labels are available, and no single teacher provides a reliable target ordering on its own\. A straightforward baseline is to regress student outputs directly to teacher scores\. In TSAD, however, direct regression can spend student capacity fitting the score scale of many normal or low\-score regions, and detector\-specific calibration differences remain even after normalization\. AnoMix instead learns from pairwise score gaps whose directions are supported by multiple teachers\. Consider a mini\-batch ofBBwindows\. Letz~i\(m\)\\tilde\{z\}\_\{i\}^\{\(m\)\}denote the normalized score assigned by teachermmto sampleii, and letz^i\\hat\{z\}\_\{i\}denote the corresponding student prediction\. We denote teachermm’s signed score gap byΔij\(m\)=z~i\(m\)−z~j\(m\)\\Delta\_\{ij\}^\{\(m\)\}=\\tilde\{z\}\_\{i\}^\{\(m\)\}\-\\tilde\{z\}\_\{j\}^\{\(m\)\}\. From the batch, we enumerate all unordered non\-identical pairs\(i,j\)\(i,j\)withi<ji<jand retain only those pairs for which at least one teacher exhibits a meaningful score gap: 𝒫=\{\(i,j\):1≤i<j≤B,maxm\|Δij\(m\)\|\>δ\}\.\\mathcal\{P\}=\\left\\\{\(i,j\)\\;:\\;1\\leq i<j\\leq B,\\;\\max\_\{m\}\\left\|\\Delta\_\{ij\}^\{\(m\)\}\\right\|\>\\delta\\right\\\}\.\(1\)The pair selection step in panel \(b\) of Figure[1](https://arxiv.org/html/2610.29063#S2.F1)removes pairs whose teacher score gaps are too small to provide meaningful anomaly\-preference supervision\. The resulting set𝒫\\mathcal\{P\}defines the*consensus support*and contains the meaningful teacher\-induced comparisons used for consensus supervision before teacher scores are averaged\. Once a pair\(i,j\)\(i,j\)is retained in𝒫\\mathcal\{P\}, every teacher contributes its signed score gapΔij\(m\)\\Delta\_\{ij\}^\{\(m\)\}\. Using all teacher score gaps for each retained pair allows the final supervision to reflect the full degree of cross\-teacher agreement or disagreement on that pair, rather than only the strongest response\. We aggregate these signed gaps to form the teacher consensus vij=∑m=1MΔij\(m\),cij=\|vij\|∑m=1M\|Δij\(m\)\|\.v\_\{ij\}=\\sum\_\{m=1\}^\{M\}\\Delta\_\{ij\}^\{\(m\)\},\\qquad c\_\{ij\}=\\frac\{\|v\_\{ij\}\|\}\{\\sum\_\{m=1\}^\{M\}\\left\|\\Delta\_\{ij\}^\{\(m\)\}\\right\|\}\.\(2\)Here,yij=sgn\(vij\)∈\{−1,0,1\}y\_\{ij\}=\\mathrm\{sgn\}\(v\_\{ij\}\)\\in\\\{\-1,0,1\\\}defines the consensus direction, wheresgn\(⋅\)\\mathrm\{sgn\}\(\\cdot\)is the sign function:yij=1y\_\{ij\}=1ifvij\>0v\_\{ij\}\>0,yij=−1y\_\{ij\}=\-1ifvij<0v\_\{ij\}<0, andyij=0y\_\{ij\}=0ifvij=0v\_\{ij\}=0\. The quantitycij∈\[0,1\]c\_\{ij\}\\in\[0,1\]quantifies how consistently teachers support that direction, as visualized by the confidence bar in Figure[1](https://arxiv.org/html/2610.29063#S2.F1)\. When all nonzero signed gaps point in the same direction,cij=1c\_\{ij\}=1\. When their signed score gaps strongly conflict,cijc\_\{ij\}approaches00\. A high confidence weight indicates agreement among teacher score gaps, not correctness of the resulting preference\. Ifvij=0v\_\{ij\}=0, thenyij=0y\_\{ij\}=0,cij=0c\_\{ij\}=0, and the pair contributes no effective supervision\. The student’s pairwise anomaly preference is represented by the score margindij=z^i−z^jd\_\{ij\}=\\hat\{z\}\_\{i\}\-\\hat\{z\}\_\{j\}, the signed difference between student predictions for samplesiiandjj\. The CoRank loss in panel \(c\) of Figure[1](https://arxiv.org/html/2610.29063#S2.F1)penalizes student marginsdijd\_\{ij\}that disagree with the teacher consensus directionyijy\_\{ij\}, with each pair weighted by its consensus confidencecijc\_\{ij\}: ℒCoRank=1\|𝒫\|∑\(i,j\)∈𝒫cijlog\(1\+exp\(−yijdij\)\)\.\\mathcal\{L\}\_\{\\mathrm\{CoRank\}\}=\\frac\{1\}\{\|\\mathcal\{P\}\|\}\\sum\_\{\(i,j\)\\in\\mathcal\{P\}\}c\_\{ij\}\\log\\\!\\Big\(1\+\\exp\\\!\\big\(\-y\_\{ij\}d\_\{ij\}\\big\)\\Big\)\.\(3\)If no valid pair is retained in a mini\-batch, we define the batch loss as zero and skip its contribution\. CoRank can be viewed as confidence\-weighted distillation of pairwise anomaly preferences induced by normalized teacher scores\. It avoids fitting teacher\-specific pointwise scores and does not construct pairwise supervision from an averaged teacher score alone\. Instead, it first constructs the pair support from teacher\-level score gaps, assigns the consensus direction, and then uses consensus confidence to down\-weight conflicting comparisons\. CoRank contributes a multi\-teacher procedure for constructing and weighting pairwise supervision before applying the pairwise logistic objective\. This trains the student network to act as a neural anomaly\-scoring function whose scalar outputs reflect pairwise anomaly preferences supported by teacher consensus\. ### 3\.5Training and Inference Let𝒲train=\{𝐖t:t=L,…,T\}\\mathcal\{W\}\_\{\\mathrm\{train\}\}=\\\{\\mathbf\{W\}\_\{t\}:t=L,\\dots,T\\\}denote the set of training windows\. During training, each mini\-batchℬ⊂𝒲train\\mathcal\{B\}\\subset\\mathcal\{W\}\_\{\\mathrm\{train\}\}is paired with the normalized teacher scores at the corresponding endpoints, and AnoMix optimizes θ⋆=argminθ𝔼ℬ∼𝒲train\[ℒCoRank\(gθ,ℬ,\{z~\(m\)\}m=1M\)\]\.\\theta^\{\\star\}=\\arg\\min\_\{\\theta\}\\mathbb\{E\}\_\{\\mathcal\{B\}\\sim\\mathcal\{W\}\_\{\\mathrm\{train\}\}\}\\left\[\\mathcal\{L\}\_\{\\mathrm\{CoRank\}\}\\left\(g\_\{\\theta\};\\mathcal\{B\},\\\{\\tilde\{z\}^\{\(m\)\}\\\}\_\{m=1\}^\{M\}\\right\)\\right\]\.\(4\)At inference time, all teachers are discarded\. For each test window, the anomaly score is simply st=gθ⋆\(𝐖t\),t=L,…,Ttest\.s\_\{t\}=g\_\{\\theta^\{\\star\}\}\(\\mathbf\{W\}\_\{t\}\),\\qquad t=L,\\dots,T\_\{\\mathrm\{test\}\}\.\(5\)Thus, pairwise training still yields a standard pointwise anomaly score at inference time\. ## 4Experiments ### 4\.1Setup #### Datasets\. We evaluate on seven real\-world multivariate TSAD benchmark datasets, including PSM\[[1](https://arxiv.org/html/2610.29063#bib.bib1)\], SWaT\[[2](https://arxiv.org/html/2610.29063#bib.bib2)\], Exathlon\[[35](https://arxiv.org/html/2610.29063#bib.bib35)\], SMD\[[3](https://arxiv.org/html/2610.29063#bib.bib3)\], SMAP\[[4](https://arxiv.org/html/2610.29063#bib.bib4)\], Daphnet\[[5](https://arxiv.org/html/2610.29063#bib.bib5)\], and SWAN\[[36](https://arxiv.org/html/2610.29063#bib.bib36)\]\. Dataset descriptions and statistics are provided in Appendix[F](https://arxiv.org/html/2610.29063#A6)\. #### Metrics\. We report six threshold\-independent metrics: VUS\-ROC and VUS\-PR\[[37](https://arxiv.org/html/2610.29063#bib.bib37)\], AUC\-ROC\[[38](https://arxiv.org/html/2610.29063#bib.bib38)\], AUC\-PR\[[39](https://arxiv.org/html/2610.29063#bib.bib39)\], and R\-AUC\-ROC and R\-AUC\-PR\[[40](https://arxiv.org/html/2610.29063#bib.bib40)\]\. The main experiments focus on VUS\-ROC \(V\-ROC\) and VUS\-PR \(V\-PR\)\. Formal definitions of the reported metrics are provided in Appendix[G](https://arxiv.org/html/2610.29063#A7)\. #### Baselines\. Table[1](https://arxiv.org/html/2610.29063#S4.T1)compares AnoMix against ten representative individual TSAD detectors\. These baselines include OmniAnomaly\[[3](https://arxiv.org/html/2610.29063#bib.bib3)\], USAD\[[9](https://arxiv.org/html/2610.29063#bib.bib9)\], Anomaly Transformer\[[15](https://arxiv.org/html/2610.29063#bib.bib15)\], TranAD\[[10](https://arxiv.org/html/2610.29063#bib.bib10)\], TimesNet\[[11](https://arxiv.org/html/2610.29063#bib.bib11)\], SARAD\[[41](https://arxiv.org/html/2610.29063#bib.bib41)\], MOMENT\[[42](https://arxiv.org/html/2610.29063#bib.bib42)\], CATCH\[[43](https://arxiv.org/html/2610.29063#bib.bib43)\], CrossAD\[[14](https://arxiv.org/html/2610.29063#bib.bib14)\], and OracleAD\[[12](https://arxiv.org/html/2610.29063#bib.bib12)\], covering the main TSAD paradigms considered in recent benchmarks\. Table[2](https://arxiv.org/html/2610.29063#S4.T2)compares AnoMix against five score\-ensemble baselines built from the same three teachers and the same normalized teacher scores\. We consider Mean, Max, Median, Rank Fusion, and Reciprocal Rank Fusion \(RRF\)\[[44](https://arxiv.org/html/2610.29063#bib.bib44)\]\. For the zero\-shot transfer setting in Table[4](https://arxiv.org/html/2610.29063#S4.T4), we compare AnoMix\-ZS against six pretrained time\-series foundation models: MOMENT\[[42](https://arxiv.org/html/2610.29063#bib.bib42)\], TimesFM\[[45](https://arxiv.org/html/2610.29063#bib.bib45)\], Chronos\[[46](https://arxiv.org/html/2610.29063#bib.bib46)\], MOIRAI\[[47](https://arxiv.org/html/2610.29063#bib.bib47)\], Lag\-Llama\[[48](https://arxiv.org/html/2610.29063#bib.bib48)\], and DADA\[[49](https://arxiv.org/html/2610.29063#bib.bib49)\]\. For most deep TSAD and zero\-shot baselines, we use implementations from the TSB\-AD repository\[[6](https://arxiv.org/html/2610.29063#bib.bib6)\]\. Baselines not available in TSB\-AD are evaluated using their official repositories\. Baseline descriptions and the training and evaluation protocol are provided in Appendix[H](https://arxiv.org/html/2610.29063#A8)\. #### Teacher Set\. By default, AnoMix uses a fixed three\-teacher setting consisting of SARAD, CrossAD, and OracleAD\. This teacher set is formed by taking the three most recent state\-of\-the\-art TSAD detectors in our teacher pool, which provides heterogeneous anomaly supervision while keeping the training\-time teacher pool compact\. For analysis convenience and to avoid post\-hoc teacher selection, this set was fixed before evaluating AnoMix on the benchmark datasets\. For each teacher, one fixed checkpoint supplies cached training scores shared across the five student seeds; Table[1](https://arxiv.org/html/2610.29063#S4.T1)separately reports each teacher’s five\-seed mean performance\. Alternative teacher\-set choices, including leave\-one\-out \(LOO\) rankings and All\-10, are analyzed in Section[4\.4](https://arxiv.org/html/2610.29063#S4.SS4)\. The LOO selection protocol and the full teacher ranking for each target dataset are detailed in Appendix[I](https://arxiv.org/html/2610.29063#A9)\. #### Implementation Details\. Retrained models use five random seeds under fixed splits; the zero\-shot foundation baselines use fixed released checkpoints\. AnoMix uses a single\-head TCN student with hidden dimension6464, six causal blocks, kernel size33, dropout0\.10\.1, and fewer than 80k parameters on the benchmark datasets\. The student receptive field is 127 time steps, and most datasets use window size 127 to fully use this temporal context\. We train the student for 10 epochs using AdamW with cosine annealing and a score\-gap thresholdδ=0\.1\\delta=0\.1for valid\-pair selection\. Student training uses only the provided training split and no anomaly labels\. Full implementation details are provided in Appendix[J](https://arxiv.org/html/2610.29063#A10)\. ### 4\.2Main Results Table 1:Main results on the seven benchmark datasets \(5\-seed mean, %\)\. Avg Rank is the per\-row average rank across the 14 dataset\-metric values, where lower is better\.Boldfaceindicates the best result in each column, andunderlinedvalues indicate the second\-best result\.MethodPSMSWaTExathlonSMDSMAPDaphnetSWANAvg RankV\-ROCV\-PRV\-ROCV\-PRV\-ROCV\-PRV\-ROCV\-PRV\-ROCV\-PRV\-ROCV\-PRV\-ROCV\-PROmni\[[3](https://arxiv.org/html/2610.29063#bib.bib3)\]51\.5922\.5259\.4227\.3299\.9899\.7595\.4069\.9849\.9327\.6878\.6018\.3892\.0691\.166\.18USAD\[[9](https://arxiv.org/html/2610.29063#bib.bib9)\]52\.1522\.7368\.9233\.3999\.9799\.6395\.9871\.9749\.8027\.5876\.9517\.1589\.8088\.606\.36A\.T\[[15](https://arxiv.org/html/2610.29063#bib.bib15)\]53\.7623\.1356\.6323\.5537\.7024\.8844\.0311\.8040\.5622\.3046\.2810\.3386\.3381\.0710\.29TranAD\[[10](https://arxiv.org/html/2610.29063#bib.bib10)\]55\.9022\.2577\.0637\.8699\.5093\.8886\.5152\.0571\.9637\.0676\.7117\.9892\.0286\.486\.93TimesNet\[[11](https://arxiv.org/html/2610.29063#bib.bib11)\]57\.9124\.3259\.2924\.3598\.6185\.3393\.9653\.0659\.2223\.9090\.2533\.9793\.8788\.776\.71SARAD\[[41](https://arxiv.org/html/2610.29063#bib.bib41)\]58\.1026\.7868\.2929\.8299\.8698\.2795\.4062\.6575\.2737\.3389\.9638\.7292\.1190\.204\.25MOMENT\[[42](https://arxiv.org/html/2610.29063#bib.bib42)\]42\.3916\.5954\.9520\.2199\.6697\.1757\.2710\.1954\.7227\.8591\.7135\.1092\.0786\.258\.18CATCH\[[43](https://arxiv.org/html/2610.29063#bib.bib43)\]53\.9923\.4258\.8224\.6199\.8397\.7996\.4567\.3349\.6927\.4591\.3738\.8692\.1689\.665\.86CrossAD\[[14](https://arxiv.org/html/2610.29063#bib.bib14)\]59\.0227\.6660\.7926\.3399\.4192\.4796\.4972\.5252\.9535\.6289\.7736\.3192\.9191\.664\.79OracleAD\[[12](https://arxiv.org/html/2610.29063#bib.bib12)\]66\.3328\.6859\.8726\.4499\.6697\.1885\.7152\.6979\.8840\.1888\.4634\.6092\.4486\.305\.39AnoMix70\.2444\.0378\.5642\.40100\.0099\.9798\.8789\.3798\.3897\.6594\.1352\.3793\.7591\.761\.07 Table 2:Score\-ensemble comparison on the seven benchmark datasets \(5\-seed mean, %\)\. Avg Rank is the per\-row average rank across the 14 dataset\-metric values, where lower is better\.Boldfaceindicates the best result in each column, andunderlinedvalues indicate the second\-best result\.#### Benchmark Results\. Table[1](https://arxiv.org/html/2610.29063#S4.T1)shows that AnoMix achieves the strongest overall average rank across the benchmark\. More importantly, strong baselines are not stable across datasets\. The second\-best results are distributed across reconstruction, forecasting, association\-aware, deviation\-based, and foundation\-model baselines, indicating that each detector family captures only part of the anomaly structure present in the benchmark\. AnoMix turns this dataset\-dependent complementarity into a single student, rather than committing to one detector family at deployment\. The magnitude of improvement is also non\-uniform across datasets and metrics\. AnoMix yields its largest gains on PSM, SMD, and especially SMAP, where the best individual detectors still leave substantial room for improvement, whereas the gains on Exathlon are small because several methods already achieve near\-ceiling performance\. Across datasets, the improvement over the strongest individual baseline is especially pronounced on V\-PR and smaller on V\-ROC\. This suggests that AnoMix does not merely improve coarse ranking quality, but more sharply concentrates high anomaly scores on true anomalous regions\. Full PR and ROC metric results are reported in Appendix[E](https://arxiv.org/html/2610.29063#A5)\. #### Comparison with Score\-Ensemble Baselines\. Table[2](https://arxiv.org/html/2610.29063#S4.T2)tests whether AnoMix’s gains can be explained by static score aggregation alone\. The comparison fixes the teacher pool and changes only how teacher information is combined at inference time\. Among the fusion rules, RRF is the strongest overall, but AnoMix achieves a substantially better average rank\. The gaps are especially large on PSM, SWaT, SMD, and SMAP\. If the gains came merely from merging teacher outputs at test time, stronger fusion rules such as rank fusion or RRF would be expected to close most of the gap\. Instead, the gap persists even against rank\-based fusion, indicating that AnoMix benefits from learning an input\-dependent student scoring function rather than from static score aggregation alone\. Teacher scores are used as cross\-teacher comparative supervision during training, allowing the student to learn anomaly preferences across teachers while deploying as a single model\. ### 4\.3Ablation Studies Figure 2:Ablation study reporting macro\-average V\-PR \(%\) over the seven benchmark datasets\. \(a\) Student backbones: LSTM, Transformer, Dilated\-RNN, and TCN\. \(b\) Ranking losses: RankNet, Hinge, ListNet, and Spearman on an averaged teacher\-score target, and CoRank\. \(c\) Supervision forms: score regression on the averaged teacher\-score target, MeanRank, and CoRank\. \(d\) CoRank decomposition: MeanRank, consensus confidence, consensus support, and full CoRank\.#### Backbone Choice\. To assess backbone dependence, Figure[2](https://arxiv.org/html/2610.29063#S4.F2)\(a\) compares four student backbones under the same CoRank objective\. Each backbone is used within the same endpoint\-scoring template, producing an endpoint representation that is mapped to a scalar anomaly score\. The LSTM, Transformer, and Dilated\-RNN variants use their best learning rate on each dataset\. TCN achieves the highest macro V\-PR \(73\.93%\), outperforming Transformer \(62\.51%\), Dilated\-RNN \(58\.90%\), and LSTM \(55\.63%\) by1111–1818%pt\. With a comparable number of parameters, the result supports choosing a TCN as an efficient lightweight student for distilling pairwise anomaly preferences, without introducing a new architecture design\. #### Training Objective\. To test whether standard ranking losses suffice, Figure[2](https://arxiv.org/html/2610.29063#S4.F2)\(b\) compares CoRank with four such losses using the same student\. The baseline losses rank pairs according to the averaged normalized teacher score, but they do not use CoRank’s consensus support or consensus confidence\. CoRank achieves the highest macro V\-PR \(73\.93%\), exceeding RankNet\[[30](https://arxiv.org/html/2610.29063#bib.bib30)\]\(68\.01%\), Hinge\[[31](https://arxiv.org/html/2610.29063#bib.bib31)\]\(67\.75%\), ListNet\[[32](https://arxiv.org/html/2610.29063#bib.bib32)\]\(64\.60%\), and Spearman\[[33](https://arxiv.org/html/2610.29063#bib.bib33)\]\(68\.27%\)\. Because the student architecture is held fixed, the 5–10%pt gap is not attributable to model capacity or to the use of ranking supervision alone\. It reflects the difference between applying standard ranking surrogates to a single fused target and constructing the pairwise training signal from teacher\-level score gaps\. In this setting, CoRank’s advantage comes from how pair support and confidence are defined before the logistic ranking surrogate is applied\. #### Score Supervision Form\. To assess the benefit of pairwise supervision, Figure[2](https://arxiv.org/html/2610.29063#S4.F2)\(c\) contrasts direct score regression, fused\-target ranking, and CoRank using the same single\-head student\. In the score\-regression baseline, the student directly fits the averaged normalized teacher score using a pointwise MSE loss\. MeanRank denotes the fused\-target ranking baseline that first averages normalized teacher scores and then forms ranking pairs from gaps in the averaged score\. This baseline reaches 67\.97%, MeanRank reaches 69\.46%, and CoRank reaches 73\.93%\. These results support two conclusions\. First, relative supervision is more effective than direct pointwise score matching\. Second, ranking the averaged teacher score is not sufficient to recover the full benefit of multi\-teacher distillation\. This comparison shows that the benefit comes not only from ranking, but also from constructing pairwise supervision from teacher\-level score gaps before averaging\. Figure[2](https://arxiv.org/html/2610.29063#S4.F2)\(d\) further decomposes this teacher\-level construction\. Together with Figure[2](https://arxiv.org/html/2610.29063#S4.F2)\(b\), these results suggest that AnoMix benefits specifically from consensus\-based multi\-teacher distillation rather than from ranking alone\. #### CoRank Component Decomposition\. To identify which components drive CoRank’s gains, Figure[2](https://arxiv.org/html/2610.29063#S4.F2)\(d\) separates the effects of consensus support and consensus confidence while using the same pairwise logistic loss across all variants\. MeanRank reaches 69\.46% macro V\-PR, and adding consensus confidence under the same support from averaged\-score gaps changes this only slightly to 69\.48%\. Using CoRank’s consensus support increases macro V\-PR to 73\.54%, and adding consensus confidence on top yields full CoRank at 73\.93%\. This indicates that CoRank’s main gain comes from constructing the pairwise training set from teacher\-level score gaps before averaging\. Averaging teachers before support construction can weaken comparisons where one detector gives a clear score gap but other detectors give small or neutral gaps, whereas consensus support preserves these comparisons for the student\. Consensus confidence then provides a smaller additional gain by reducing the influence of retained pairs with stronger teacher conflict\. Additional ablation studies are provided in Appendix[M](https://arxiv.org/html/2610.29063#A13)\. ### 4\.4Distillation Analysis Table 3:Teacher\-set variants on the seven benchmark datasets \(5\-seed mean, %; standard deviations in Appendix[O](https://arxiv.org/html/2610.29063#A15)\)\. LOO\-kkuses the top\-kkteachers from the target\-excluded teacher ranking, and Sel\-3 is the fixed three\-teacher setting used in Table[1](https://arxiv.org/html/2610.29063#S4.T1)\. Avg Rank is computed over the 14 reported values, where lower is better\.Boldfaceindicates the best result in each column, andunderlinedvalues indicate the second\-best result\.Figure 3:Mean absolute Spearman correlation with teacher score sequences \(\|ρS\|\|\\rho\_\{S\}\|\) versus V\-PR on five non\-saturated datasets\. A higher\|ρS\|\|\\rho\_\{S\}\|indicates stronger alignment with teacher score sequences, while a lower\|ρS\|\|\\rho\_\{S\}\|indicates weaker alignment\. The blue star denotes AnoMix, and the remaining markers denote the score\-ensemble baselines \(Mean, Max, Median, Rank Fusion, RRF\)\.#### Teacher\-Set Variants\. We test AnoMix’s sensitivity to teacher identity and pool size\. For each target dataset, LOO\-kkselects the topkkteachers by average V\-PR on the other six datasets; Sel\-3 is the fixed three\-teacher set chosen before evaluation, and All\-10 uses the full teacher pool\. Table[3](https://arxiv.org/html/2610.29063#S4.T3)shows a clear separation between single\-teacher and multi\-teacher settings\. LOO\-1 is substantially weaker than all evaluated multi\-teacher variants, suggesting that the teacher signals are complementary enough for AnoMix to benefit from combining them rather than relying on a single teacher\. This is consistent with the role of CoRank, which aggregates teacher\-supported score gaps instead of matching any single teacher score directly\. The same table also shows that AnoMix is not highly sensitive to teacher\-set selection\. All\-10 achieves the best overall average rank, while the fixed three\-teacher benchmark setting \(Sel\-3\) remains close to the stronger LOO variants\. However, All\-10 also degrades PSM substantially, suggesting that broader teacher pools can add complementary training signal while also introducing harmful or redundant comparisons\. The similar performance of LOO\-3, LOO\-4, LOO\-5, and Sel\-3 suggests that a compact heterogeneous pool captures most of the gain, with LOO selection offering a practical alternative\. Appendix[I](https://arxiv.org/html/2610.29063#A9)further tests mixed\-quality, weak, and correlated teacher pools\. #### Score Alignment\. Figure[3](https://arxiv.org/html/2610.29063#S4.F3)tests whether AnoMix is merely approximating a static ensemble\. Across the non\-saturated datasets, AnoMix attains higher V\-PR than all score\-ensemble baselines while exhibiting lower average Spearman correlation with the teacher score sequences\. If the student were simply learning a smoothed version of one teacher or of a fused teacher score, stronger performance would be expected to come with stronger teacher\-score alignment\. Instead, the opposite pattern is observed: AnoMix is more accurate while being less correlated with teacher outputs\. This indicates that the student is not passively inheriting teacher scores, but integrating teacher information into a more effective neural anomaly\-scoring function\. Taken together with Table[3](https://arxiv.org/html/2610.29063#S4.T3), this supports the intended role of CoRank as a distillation objective rather than a surrogate ensemble rule\. Score visualizations and teacher\-alignment diagnostics are provided in Appendices[D](https://arxiv.org/html/2610.29063#A4)and[N](https://arxiv.org/html/2610.29063#A14)\. ### 4\.5Zero\-Shot Cross\-Dataset Detection Table 4:Zero\-shot transfer results \(%\)\. AnoMix\-ZS reports five\-seed means, with standard deviations in Appendix[O](https://arxiv.org/html/2610.29063#A15); foundation baselines use fixed released checkpoints\. AnoMix\-ZS is trained on the other six datasets and evaluated on the held\-out target\.Boldfaceindicates the best result in each column, andunderlinedvalues indicate the second\-best result\.AnoMix’s training procedure suggests a natural zero\-shot extension because the student can be distilled from teacher\-derived ranking signals on source datasets and then applied to an unseen target dataset\. We evaluate this extension under a stricter cross\-dataset setting that removes target\-dataset supervision entirely\. For this evaluation, we use AnoMix\-ZS, a compact channel\-independent student that can operate on varying input dimensionality\. The architecture and protocol are detailed in Appendix[B](https://arxiv.org/html/2610.29063#A2)\. AnoMix\-ZS is trained on six datasets with the same ranking\-based distillation objective and then evaluated on the held\-out target, without observing the target dataset or teacher scores during training\. The six foundation baselines are converted into anomaly scores following their evaluation wrappers: MOMENT uses reconstruction error, TimesFM, Chronos, MOIRAI, and Lag\-Llama use one\-step forecasting error, and DADA uses mask\-reconstruction variance\. Table[4](https://arxiv.org/html/2610.29063#S4.T4)shows that ranking\-based distillation transfers beyond the training benchmarks and remains highly competitive even in the strict zero\-shot setting\. Among the evaluated models, AnoMix\-ZS achieves the best average rank \(1\.641\.64\) with8383k parameters, whereas the pretrained foundation baselines range from1\.841\.84M to710710M parameters\. This comparison is informative for two reasons\. First, AnoMix\-ZS is not merely memorizing source\-dataset behavior, but learning anomaly\-ranking information that generalizes to unseen datasets\. Second, the comparison shows that cross\-dataset TSAD\-oriented distillation can match a much larger TSAD\-specific foundation model \(8383k vs1\.841\.84M parameters for DADA\), and substantially outperforms general\-purpose time\-series foundation models that range from1010M to710710M parameters\. Taken together, these results suggest that TSAD\-oriented cross\-dataset distillation, as in AnoMix, offers a promising direction for building TSAD\-specific foundation models rather than relying solely on general\-purpose time\-series foundation models\. ## 5Conclusion We studied whether unsupervised time series anomaly detection can be effectively addressed through knowledge distillation despite the absence of labels and the heterogeneity of teacher anomaly scores\. Our experimental results suggest that it can\. We introduced AnoMix, a multi\-teacher distillation framework that learns a single lightweight student by transferring pairwise anomaly preferences from multiple heterogeneous TSAD teachers, rather than directly imitating raw teacher scores\. Across benchmarks, the empirical evidence consistently shows that the benefit of multi\-teacher TSAD comes from distilling complementary teacher scoring principles into a new student predictor, not merely from combining teacher scores\. AnoMix outperforms individual detectors and score\-ensemble baselines, while teacher\-set and correlation analyses further indicate that it learns beyond static ensemble behavior and remains effective under broader teacher pools\. The zero\-shot cross\-dataset results further show that AnoMix\-ZS remains effective on unseen datasets and can compete with much larger pretrained time\-series foundation models\. Although teachers use complex, detector\-specific models, their scoring principles are ultimately expressed through scalar anomaly scores\. Our results suggest that learning pairwise preferences from these scores allows a compact student to integrate complementary scoring principles without reproducing the teachers’ internal models\. A more detailed discussion of limitations and future directions is provided in Appendix[Q](https://arxiv.org/html/2610.29063#A17)\. ## References - \[1\]Ahmed Abdulaal, Zhuanghua Liu, and Tomer Lancewicki\.Practical approach to asynchronous multivariate time series anomaly detection and localization\.In*Proceedings of the 27th ACM SIGKDD Conference on Knowledge Discovery and Data Mining*, 2021\. - \[2\]Aditya P\. Mathur and Nils Ole Tippenhauer\.SWaT: a water treatment testbed for research and training on ICS security\.In*International Workshop on Cyber\-physical Systems for Smart Water Networks*, 2016\. - \[3\]Ya Su, Youjian Zhao, Chenhao Niu, Rong Liu, Wei Sun, and Dan Pei\.Robust anomaly detection for multivariate time series through stochastic recurrent neural network\.In*Proceedings of the 25th ACM SIGKDD International Conference on Knowledge Discovery and Data Mining*, 2019\. - \[4\]Kyle Hundman, Valentino Constantinou, Christopher Laporte, Ian Colwell, and Tom Soderstrom\.Detecting Spacecraft Anomalies Using LSTMs and Nonparametric Dynamic Thresholding\.In*Proceedings of the 24th ACM SIGKDD International Conference on Knowledge Discovery and Data Mining*, 2018\. - \[5\]Marc Bächlin, Meir Plotnik, Daniel Roggen, Inbal Maidan, Jeffrey M\. Hausdorff, Nir Giladi, and Gerhard Tröster\.Wearable Assistant for Parkinson’s Disease Patients With the Freezing of Gait Symptom\.*IEEE Transactions on Information Technology in Biomedicine*, 2010\. - \[6\]Qinghua Liu and John Paparrizos\.The elephant in the room: Towards a reliable time\-series anomaly detection benchmark\.In*Advances in Neural Information Processing Systems*, 2024\. - \[7\]Xiangfei Qiu, Zhe Li, Wanghui Qiu, Shiyan Hu, Lekui Zhou, Xingjian Wu, Zhengyu Li, Chenjuan Guo, Aoying Zhou, Zhenli Sheng, Jilin Hu, Christian S\. Jensen, and Bin Yang\.TAB: Unified benchmarking of time series anomaly detection methods\.*Proceedings of the VLDB Endowment*, 2025\. - \[8\]M\. Saquib Sarfraz, Mei\-Yen Chen, Lukas Layer, Kunyu Peng, and Marios Koulakis\.Position: Quo vadis, unsupervised time series anomaly detection?In*Proceedings of the 41st International Conference on Machine Learning*, 2024\. - \[9\]Julien Audibert, Pietro Michiardi, Frédéric Guyard, Sébastien Marti, and Maria A\. Zuluaga\.USAD: UnSupervised Anomaly Detection on multivariate time series\.In*Proceedings of the 26th ACM SIGKDD International Conference on Knowledge Discovery and Data Mining*, 2020\. - \[10\]Shreshth Tuli, Giuliano Casale, and Nicholas R\. Jennings\.TranAD: deep transformer networks for anomaly detection in multivariate time series data\.*Proceedings of the VLDB Endowment*, 2022\. - \[11\]Haixu Wu, Tengge Hu, Yong Liu, Hang Zhou, Jianmin Wang, and Mingsheng Long\.TimesNet: Temporal 2d\-variation modeling for general time series analysis\.In*International Conference on Learning Representations*, 2023\. - \[12\]Dongchan Cho, Jiho Han, Keumyeong Kang, Minsang Kim, Honggyu Ryu, and Namsoon Jung\.Structured temporal causality for interpretable multivariate time series anomaly detection\.In*The Thirty\-ninth Annual Conference on Neural Information Processing Systems*, 2025\. - \[13\]Lukas Ruff, Robert Vandermeulen, Nico Goernitz, Lucas Deecke, Shoaib Ahmed Siddiqui, Alexander Binder, Emmanuel Müller, and Marius Kloft\.Deep one\-class classification\.In*Proceedings of the International Conference on Machine Learning*, 2018\. - \[14\]Beibu Li, Qichao Shentu, Yang Shu, Hui Zhang, Ming Li, Ning Jin, Bin Yang, and Chenjuan Guo\.CrossAD: Time series anomaly detection with cross\-scale associations and cross\-window modeling\.In*The Thirty\-ninth Annual Conference on Neural Information Processing Systems*, 2025\. - \[15\]Jiehui Xu, Haixu Wu, Jianmin Wang, and Mingsheng Long\.Anomaly Transformer: Time series anomaly detection with association discrepancy\.In*International Conference on Learning Representations*, 2022\. - \[16\]Charu C\. Aggarwal and Saket Sathe\.Theoretical foundations and algorithms for outlier ensembles\.*ACM SIGKDD Explorations Newsletter*, 2015\. - \[17\]Yue Zhao, Zain Nasrullah, Maciej K\. Hryniewicki, and Zheng Li\.LSCP: Locally selective combination in parallel outlier ensembles\.In*Proceedings of the SIAM International Conference on Data Mining*, 2019\. - \[18\]Yue Zhao, Xiyang Hu, Cheng Cheng, Cong Wang, Changlin Wan, Wen Wang, Jianing Yang, Haoping Bai, Zheng Li, Cao Xiao, Yunlong Wang, Zhi Qiao, Jimeng Sun, and Leman Akoglu\.SUOD: Accelerating large\-scale unsupervised heterogeneous outlier detection\.In*Proceedings of Machine Learning and Systems*, 2021a\. - \[19\]Yue Zhao, Ryan Rossi, and Leman Akoglu\.Automatic unsupervised outlier model selection\.In*Advances in Neural Information Processing Systems*, 2021b\. - \[20\]Jianping Gou, Baosheng Yu, Stephen J\. Maybank, and Dacheng Tao\.Knowledge distillation: A survey\.*International Journal of Computer Vision*, 2021\. - \[21\]Geoffrey Hinton, Oriol Vinyals, and Jeff Dean\.Distilling the knowledge in a neural network\.*arXiv preprint arXiv:1503\.02531*, 2015\. - \[22\]Adriana Romero, Nicolas Ballas, Samira Ebrahimi Kahou, Antoine Chassang, Carlo Gatta, and Yoshua Bengio\.Fitnets: Hints for thin deep nets\.In*International Conference on Learning Representations*, 2015\. - \[23\]Yonglong Tian, Dilip Krishnan, and Phillip Isola\.Contrastive representation distillation\.In*International Conference on Learning Representations*, 2020\. - \[24\]Frederick Tung and Greg Mori\.Similarity\-preserving knowledge distillation\.In*Proceedings of the IEEE/CVF International Conference on Computer Vision*, 2019\. - \[25\]Yuntao Chen, Naiyan Wang, and Zhaoxiang Zhang\.DarkRank: Accelerating deep metric learning via cross sample similarities transfer\.In*Proceedings of the AAAI Conference on Artificial Intelligence*, 2018\. - \[26\]Wonpyo Park, Dongju Kim, Yan Lu, and Minsu Cho\.Relational knowledge distillation\.In*Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition*, 2019\. - \[27\]Guodong Wang, Shumin Han, Errui Ding, and Di Huang\.Student\-teacher feature pyramid matching for anomaly detection\.In*British Machine Vision Conference*, 2021\. - \[28\]Mohammadreza Salehi, Niousha Sadjadi, Soroosh Baselizadeh, Mohammad H\. Rohban, and Hamid R\. Rabiee\.Multiresolution knowledge distillation for anomaly detection\.In*Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition*, 2021\. - \[29\]Chen Liu, Shibo He, Qihang Zhou, Shizhong Li, and Wenchao Meng\.Large language model guided knowledge distillation for time series anomaly detection\.In*Proceedings of the International Joint Conference on Artificial Intelligence*, 2024\. - \[30\]Christopher Burges, Tal Shaked, Erin Renshaw, Ari Lazier, Matt Deeds, Nicole Hamilton, and Greg Hullender\.Learning to rank using gradient descent\.In*Proceedings of the International Conference on Machine Learning*, 2005\. - \[31\]Tie\-Yan Liu\.Learning to rank for information retrieval\.*Foundations and Trends in Information Retrieval*, 2009\. - \[32\]Zhe Cao, Tao Qin, Tie\-Yan Liu, Ming\-Feng Tsai, and Hang Li\.Learning to rank: From pairwise approach to listwise approach\.In*Proceedings of the International Conference on Machine Learning*, 2007\. - \[33\]Mathieu Blondel, Olivier Teboul, Quentin Berthet, and Josip Djolonga\.Fast differentiable sorting and ranking\.In*Proceedings of the International Conference on Machine Learning*, 2020\. - \[34\]Shaojie Bai, J\. Zico Kolter, and Vladlen Koltun\.An empirical evaluation of generic convolutional and recurrent networks for sequence modeling, 2018\. - \[35\]Vincent Jacob, Fei Song, Arnaud Stiegler, Bijan Rad, Yanlei Diao, and Nesime Tatbul\.Exathlon: A benchmark for explainable anomaly detection over time series\.*Proceedings of the VLDB Endowment*, 2021\. - \[36\]Rafal A\. Angryk, Petrus C\. Martens, Berkay Aydin, Dustin Kempton, Sushant S\. Mahajan, Sunitha Basodi, Azim Ahmadzadeh, Xumin Cai, Soukaina Filali Boubrahimi, Shah Muhammad Hamdi, Michael A\. Schuh, and Manolis K\. Georgoulis\.Multivariate time series dataset for space weather data analytics\.*Scientific Data*, 2020\. - \[37\]John Paparrizos, Paul Boniol, Themis Palpanas, Ruey S\. Tsay, Aaron Elmore, and Michael J\. Franklin\.Volume under the surface: A new accuracy evaluation measure for time\-series anomaly detection\.*Proceedings of the VLDB Endowment*, 2022\. - \[38\]Tom Fawcett\.An introduction to ROC analysis\.*Pattern Recognition Letters*, 2006\. - \[39\]Jesse Davis and Mark Goadrich\.The relationship between precision\-recall and ROC curves\.In*Proceedings of the International Conference on Machine Learning*, 2006\. - \[40\]Nesime Tatbul, Tae Jun Lee, Stan Zdonik, Mejbah Alam, and Justin Gottschlich\.Precision and recall for time series\.In*Advances in Neural Information Processing Systems*, 2018\. - \[41\]Zhihao Dai, Ligang He, Shuang\-Hua Yang, and Matthew Leeke\.SARAD: Spatial association\-aware anomaly detection and diagnosis for multivariate time series\.In*Advances in Neural Information Processing Systems*, 2024\. - \[42\]Mononito Goswami, Konrad Szafer, Arjun Choudhry, Yifu Cai, Shuo Li, and Artur Dubrawski\.MOMENT: A Family of Open Time\-Series Foundation Models\.In*Proceedings of the International Conference on Machine Learning*, 2024\. - \[43\]Xingjian Wu, Xiangfei Qiu, Zhengyu Li, Yihang Wang, Jilin Hu, Chenjuan Guo, Hui Xiong, and Bin Yang\.CATCH: Channel\-aware multivariate time series anomaly detection via frequency patching\.In*International Conference on Learning Representations*, 2025\. - \[44\]Gordon V\. Cormack, Charles L\. A\. Clarke, and Stefan Büttcher\.Reciprocal rank fusion outperforms Condorcet and individual rank learning methods\.In*Proceedings of the International ACM SIGIR Conference on Research and Development in Information Retrieval*, 2009\. - \[45\]Abhimanyu Das, Weihao Kong, Rajat Sen, and Yichen Zhou\.A Decoder\-Only Foundation Model for Time\-Series Forecasting\.In*Proceedings of the 41st International Conference on Machine Learning*, 2024\. - \[46\]Abdul Fatir Ansari, Lorenzo Stella, Ali Caner Turkmen, Xiyuan Zhang, Pedro Mercado, Huibin Shen, Oleksandr Shchur, Syama Sundar Rangapuram, Sebastian Pineda Arango, Shubham Kapoor, Jasper Zschiegner, Danielle C\. Maddix, Hao Wang, Michael W\. Mahoney, Kari Torkkola, Andrew Gordon Wilson, Michael Bohlke\-Schneider, and Bernie Wang\.Chronos: Learning the Language of Time Series\.*Transactions on Machine Learning Research*, 2024\. - \[47\]Gerald Woo, Chenghao Liu, Akshat Kumar, Caiming Xiong, Silvio Savarese, and Doyen Sahoo\.Unified Training of Universal Time Series Forecasting Transformers\.In*Proceedings of the International Conference on Machine Learning*, 2024\. - \[48\]Kashif Rasul, Arjun Ashok, Andrew Robert Williams, Arian Khorasani, George Adamopoulos, Rishika Bhagwatkar, Marin Biloš, Hena Ghonia, Nadhir Hassen, Anderson Schneider, Sahil Garg, Alexandre Drouin, Nicolas Chapados, Yuriy Nevmyvaka, and Irina Rish\.Lag\-Llama: Towards Foundation Models for Time Series Forecasting\.In*NeurIPS 2023 Workshop on Robustness of Few\-Shot and Zero\-Shot Learning in Large Foundation Models*, 2023\. - \[49\]Qichao Shentu, Beibu Li, Kai Zhao, Yang Shu, Zhongwen Rao, Lujia Pan, Bin Yang, and Chenjuan Guo\.Towards a General Time Series Anomaly Detector with Adaptive Bottlenecks and Dual Adversarial Decoders\.In*International Conference on Learning Representations*, 2025\. - \[50\]Astha Garg, Wenyu Zhang, Jules Samaran, Ramasamy Savitha, and Chuan\-Sheng Foo\.An evaluation of anomaly detection and diagnosis in multivariate time series\.*IEEE Transactions on Neural Networks and Learning Systems*, 2022\. - \[51\]Alexis Huet, Jose Manuel Navarro, and Dario Rossi\.Local evaluation of time series anomaly detection algorithms\.In*Proceedings of the 28th ACM SIGKDD Conference on Knowledge Discovery and Data Mining*, 2022\. - \[52\]Chengsen Wang, Zirui Zhuang, Qi Qi, Jingyu Wang, Xingyu Wang, Haifeng Sun, and Jianxin Liao\.Drift doesn’t matter: Dynamic decomposition with diffusion reconstruction for unstable multivariate time series anomaly detection\.*Advances in neural information processing systems*, 2023\. - \[53\]HyunGi Kim, Jisoo Mok, Dongjun Lee, Jaihyun Lew, Sungjae Kim, and Sungroh Yoon\.Causality\-aware contrastive learning for robust multivariate time\-series anomaly detection\.In*Proceedings of the International Conference on Machine Learning*, 2025\. - \[54\]Mononito Goswami, Cristian Ignacio Challu, Laurent Callot, Lenon Minorics, and Andrey Kan\.Unsupervised model selection for time series anomaly detection\.In*International Conference on Learning Representations*, 2023\. ## Appendix ARationale for Multi\-Teacher Ranking Distillation AnoMix trains a neural anomaly\-scoring functiongθ:𝒳→ℝg\_\{\\theta\}:\\mathcal\{X\}\\rightarrow\\mathbb\{R\}\. For notational simplicity, we writexix\_\{i\}for the training window sample associated with an endpoint\. Since the student outputs a scalar score, learning this function does not require a pointwise anomaly\-score target\. It requires supervision that shapes the ordering induced bygθg\_\{\\theta\}\. In supervised anomaly detection, one could train the student against binary anomaly labels or labeled pairwise preferences\. In unsupervised TSAD, however, no such labels are available\. The only training signal comes from frozen teacher detectors\. A direct pointwise regression target is not identifiable in this setting\. Each teacher produces a scalar anomaly score, but the score is generated from a detector\-specific anomaly\-scoring principle, such as reconstruction error, forecasting residual, association discrepancy, or representation deviation\. Even after per\-teacher normalization, these scores do not share a calibrated score scale\. Direct regression can therefore spend student capacity fitting teacher\-specific score scales rather than learning pairwise anomaly preferences supported by multiple teachers\. Moreover, for any strictly increasing transformationhmh\_\{m\}, sm\(xi\)\>sm\(xj\)⟺hm\(sm\(xi\)\)\>hm\(sm\(xj\)\)\.s\_\{m\}\(x\_\{i\}\)\>s\_\{m\}\(x\_\{j\}\)\\quad\\Longleftrightarrow\\quad h\_\{m\}\(s\_\{m\}\(x\_\{i\}\)\)\>h\_\{m\}\(s\_\{m\}\(x\_\{j\}\)\)\.\(6\)The teacher\-induced ordering is preserved, but the pointwise regression target is changed\. Thus, without anomaly labels, the score scale cannot be identified from data alone\. AnoMix therefore distills pairwise anomaly preferences from teacher score gaps rather than treating teacher scores as pointwise regression targets\. Letz~i\(m\)\\tilde\{z\}\_\{i\}^\{\(m\)\}be the normalized score assigned by teachermmto samplexix\_\{i\}, and define the teacher score\-gap vector for a pair\(i,j\)\(i,j\)as 𝚫ij=\(Δij\(1\),…,Δij\(M\)\),Δij\(m\)=z~i\(m\)−z~j\(m\)\.\\boldsymbol\{\\Delta\}\_\{ij\}=\\left\(\\Delta\_\{ij\}^\{\(1\)\},\\ldots,\\Delta\_\{ij\}^\{\(M\)\}\\right\),\\qquad\\Delta\_\{ij\}^\{\(m\)\}=\\tilde\{z\}\_\{i\}^\{\(m\)\}\-\\tilde\{z\}\_\{j\}^\{\(m\)\}\.\(7\)Training a neural anomaly\-scoring function from these teacher score gaps requires converting𝚫ij\\boldsymbol\{\\Delta\}\_\{ij\}into pairwise supervision\. We write this supervision as Γ\(𝚫ij\)=\(Aij,yij,cij\),\\Gamma\(\\boldsymbol\{\\Delta\}\_\{ij\}\)=\(A\_\{ij\},y\_\{ij\},c\_\{ij\}\),\(8\)whereAij∈\{0,1\}A\_\{ij\}\\in\\\{0,1\\\}indicates whether the pair is informative enough to use,yij∈\{−1,0,\+1\}y\_\{ij\}\\in\\\{\-1,0,\+1\\\}specifies the consensus pairwise direction, andcij∈\[0,1\]c\_\{ij\}\\in\[0,1\]controls the strength of the pair in training\. Given such supervision, a natural pairwise learning objective is ℒ\(θ\)=1∑i<jAij∑i<jAijcijlog\(1\+exp\(−yij\(gθ\(xi\)−gθ\(xj\)\)\)\)\.\\mathcal\{L\}\(\\theta\)=\\frac\{1\}\{\\sum\_\{i<j\}A\_\{ij\}\}\\sum\_\{i<j\}A\_\{ij\}c\_\{ij\}\\log\\left\(1\+\\exp\\left\(\-y\_\{ij\}\\left\(g\_\{\\theta\}\(x\_\{i\}\)\-g\_\{\\theta\}\(x\_\{j\}\)\\right\)\\right\)\\right\)\.\(9\)If no pair is retained in a mini\-batch, the batch contributes zero loss\. This objective directly trains the student score margingθ\(xi\)−gθ\(xj\)g\_\{\\theta\}\(x\_\{i\}\)\-g\_\{\\theta\}\(x\_\{j\}\)rather than regressing to teacher\-specific pointwise scores\. The label\-free multi\-teacher setting imposes three requirements onΓ\(𝚫ij\)\\Gamma\(\\boldsymbol\{\\Delta\}\_\{ij\}\)\. First, it should select informative pairs using teacher\-level score gaps, because averaging teacher scores before pair selection can suppress a clear gap from one detector when other detectors give small or neutral gaps\. Second, it should produce a scalar\-compatible consensus direction, because the student itself outputs a single scalar anomaly score and can only realize scalar score orderings\. Third, it should be conflict\-aware, so that pairs with strong opposing teacher score gaps do not contribute as much as pairs with little directional conflict\. CoRank instantiatesΓ\\Gammawith the following choices\. The support indicator is Aij=𝟏\[∥𝚫ij∥∞\>δ\]=𝟏\[maxm\|Δij\(m\)\|\>δ\]\.A\_\{ij\}=\\mathbf\{1\}\\left\[\\\|\\boldsymbol\{\\Delta\}\_\{ij\}\\\|\_\{\\infty\}\>\\delta\\right\]=\\mathbf\{1\}\\left\[\\max\_\{m\}\|\\Delta\_\{ij\}^\{\(m\)\}\|\>\\delta\\right\]\.\(10\)This retains a pair whenever at least one teacher observes a meaningful score gap\. The condition does not assume that the teacher producing the gap is correct\. It only marks the pair as meaningful for consensus supervision before teacher\-level contrasts are suppressed by averaging\. The consensus direction is yij=sgn\(𝟏⊤𝚫ij\)=sgn\(∑m=1MΔij\(m\)\)\.y\_\{ij\}=\\operatorname\{sgn\}\\left\(\\mathbf\{1\}^\{\\top\}\\boldsymbol\{\\Delta\}\_\{ij\}\\right\)=\\operatorname\{sgn\}\\left\(\\sum\_\{m=1\}^\{M\}\\Delta\_\{ij\}^\{\(m\)\}\\right\)\.\(11\)This direction is equivalent to comparing the averaged normalized teacher score sgn\(∑m=1MΔij\(m\)\)=sgn\(z¯i−z¯j\),z¯i=1M∑m=1Mz~i\(m\)\.\\operatorname\{sgn\}\\left\(\\sum\_\{m=1\}^\{M\}\\Delta\_\{ij\}^\{\(m\)\}\\right\)=\\operatorname\{sgn\}\\left\(\\bar\{z\}\_\{i\}\-\\bar\{z\}\_\{j\}\\right\),\\qquad\\bar\{z\}\_\{i\}=\\frac\{1\}\{M\}\\sum\_\{m=1\}^\{M\}\\tilde\{z\}\_\{i\}^\{\(m\)\}\.\(12\)This equivalence defines only the consensus direction after the support set has been constructed from teacher\-level gaps\. Thus, CoRank does not ask the student to fit an arbitrary cyclic preference relation\. The pairwise direction is induced by a scalar teacher\-consensus score and is compatible with the student’s scalar output\. The confidence weight is cij=\|𝟏⊤𝚫ij\|‖𝚫ij‖1=\|∑m=1MΔij\(m\)\|∑m=1M\|Δij\(m\)\|\.c\_\{ij\}=\\frac\{\\left\|\\mathbf\{1\}^\{\\top\}\\boldsymbol\{\\Delta\}\_\{ij\}\\right\|\}\{\\\|\\boldsymbol\{\\Delta\}\_\{ij\}\\\|\_\{1\}\}=\\frac\{\\left\|\\sum\_\{m=1\}^\{M\}\\Delta\_\{ij\}^\{\(m\)\}\\right\|\}\{\\sum\_\{m=1\}^\{M\}\|\\Delta\_\{ij\}^\{\(m\)\}\|\}\.\(13\)By the triangle inequality,0≤cij≤10\\leq c\_\{ij\}\\leq 1for every retained pair\. This weight measures directional conflict among teacher score gaps\. It is large when teacher score gaps provide little opposition to the consensus direction, and small when teacher score gaps strongly conflict\. Importantly,cijc\_\{ij\}should not be interpreted as an oracle estimate of teacher correctness\. It is a label\-free conflict weight\. If the consensus direction is zero, the numerator is zero and the pair does not affect the update\. Substituting these choices into the general pairwise objective and writing𝒫=\{\(i,j\):Aij=1\}\\mathcal\{P\}=\\\{\(i,j\):A\_\{ij\}=1\\\}yields ℒCoRank=1\|𝒫\|∑\(i,j\)∈𝒫cijlog\(1\+exp\(−yij\(gθ\(xi\)−gθ\(xj\)\)\)\)\.\\mathcal\{L\}\_\{\\mathrm\{CoRank\}\}=\\frac\{1\}\{\|\\mathcal\{P\}\|\}\\sum\_\{\(i,j\)\\in\\mathcal\{P\}\}c\_\{ij\}\\log\\left\(1\+\\exp\\left\(\-y\_\{ij\}\\left\(g\_\{\\theta\}\(x\_\{i\}\)\-g\_\{\\theta\}\(x\_\{j\}\)\\right\)\\right\)\\right\)\.\(14\)Therefore, CoRank provides a concrete way to convert heterogeneous teacher score gaps into pairwise supervision for training a neural anomaly\-scoring function\. Compared with pointwise regression, it avoids fitting a non\-identifiable score scale\. Compared with single\-teacher ranking, it uses comparative signals from multiple anomaly\-scoring principles\. Compared with ranking on an averaged teacher score, it selects informative pairs from teacher\-level score gaps before aggregation and then discounts directional teacher conflict\. ## Appendix BStudent Architectures #### Endpoint Scoring\. Both the main AnoMix student and AnoMix\-ZS follow the same prediction template\. Given an input window ending at timett, the student first constructs an endpoint\-centered representation𝐡t∈ℝH\\mathbf\{h\}\_\{t\}\\in\\mathbb\{R\}^\{H\}and then maps it to one scalar anomaly score: 𝐡t=Ψ\(𝐖t\),z^t=𝐰o⊤𝐡t\+bo\.\\mathbf\{h\}\_\{t\}=\\Psi\(\\mathbf\{W\}\_\{t\}\),\\qquad\\hat\{z\}\_\{t\}=\\mathbf\{w\}\_\{o\}^\{\\top\}\\mathbf\{h\}\_\{t\}\+b\_\{o\}\.\(15\)This template matches the supervision used by AnoMix, since teacher scores and CoRank pairs are defined for window endpoints\. The main student and the zero\-shot student differ only in the representation mapΨ\(⋅\)\\Psi\(\\cdot\)\. #### Fixed\-Dimensional Encoder\. For the main benchmark setting, all train and test windows within a dataset have the same number of variablesDD\. We therefore use a compact multivariate causal TCN encoder\. Given𝐖t=\(𝐱t−L\+1,…,𝐱t\)∈ℝL×D\\mathbf\{W\}\_\{t\}=\(\\mathbf\{x\}\_\{t\-L\+1\},\\dots,\\mathbf\{x\}\_\{t\}\)\\in\\mathbb\{R\}^\{L\\times D\}, each timestep is projected into the hidden dimension: 𝐡\(0\)i=𝐏⊤𝐱i\+𝐛p∈ℝH,i=t−L\+1,…,t,\\mathbf\{h\}^\{\(0\)\}\_\{i\}=\\mathbf\{P\}^\{\\top\}\\mathbf\{x\}\_\{i\}\+\\mathbf\{b\}\_\{p\}\\in\\mathbb\{R\}^\{H\},\\qquad i=t\-L\+1,\\dots,t,\(16\)which defines𝐇\(0\)=\(𝐡t−L\+1\(0\),…,𝐡t\(0\)\)∈ℝL×H\\mathbf\{H\}^\{\(0\)\}=\(\\mathbf\{h\}^\{\(0\)\}\_\{t\-L\+1\},\\dots,\\mathbf\{h\}^\{\(0\)\}\_\{t\}\)\\in\\mathbb\{R\}^\{L\\times H\}\. The temporal encoder appliesNNcausal convolutional blocks: 𝐇\(ℓ\)=Φℓ\(𝐇\(ℓ−1\)\),ℓ=1,…,N\.\\mathbf\{H\}^\{\(\\ell\)\}=\\Phi\_\{\\ell\}\\\!\\left\(\\mathbf\{H\}^\{\(\\ell\-1\)\}\\right\),\\qquad\\ell=1,\\dots,N\.\(17\)Here,𝐏∈ℝD×H\\mathbf\{P\}\\in\\mathbb\{R\}^\{D\\times H\}and𝐛p∈ℝH\\mathbf\{b\}\_\{p\}\\in\\mathbb\{R\}^\{H\}define the input projection, andΦℓ\\Phi\_\{\\ell\}denotes a causal temporal block\. The endpoint representation used by the shared scoring template is 𝐡t=𝐇L\(N\)\.\\mathbf\{h\}\_\{t\}=\\mathbf\{H\}^\{\(N\)\}\_\{L\}\.\(18\)In the main paper, we useN=6N=6blocks with dilations\{1,2,4,8,16,32\}\\\{1,2,4,8,16,32\\\}and kernel sizek=3k=3\. Each block consists of a causal 1D convolution, residual connection, GELU activation, and dropout\. The resulting receptive field is 127 whenL=127L=127, so the endpoint representation can summarize the full input window before the final scalar prediction is made\. Under the benchmark settings used in the main paper, this student contains under 80k parameters\. #### Variable\-Dimensional Encoder\. In zero\-shot transfer, the held\-out dataset may have a different number of variables from the source datasets\. The main multivariate encoder is tied to a fixed input dimensionDD, because its first projection mapsℝD\\mathbb\{R\}^\{D\}toℝH\\mathbb\{R\}^\{H\}\. AnoMix\-ZS keeps the same endpoint\-scoring template but replaces thisDD\-dependent input encoder with a channel\-independent encoder\. It processes each variable with shared parameters, constructs one endpoint representation per variable, and aggregates those representations into the single𝐡t\\mathbf\{h\}\_\{t\}used by the score head\. Let𝐱\(d\)=\(xt−L\+1,d,…,xt,d\)∈ℝL×1\\mathbf\{x\}^\{\(d\)\}=\(x\_\{t\-L\+1,d\},\\dots,x\_\{t,d\}\)\\in\\mathbb\{R\}^\{L\\times 1\}denote the univariate window for variabledd\. All variables are reshaped into the batch dimension and passed through the same univariate projection: 𝐡d,i\(0\)=ϕ\(xi,d\)∈ℝH,d=1,…,D\.\\mathbf\{h\}^\{\(0\)\}\_\{d,i\}=\\phi\(x\_\{i,d\}\)\\in\\mathbb\{R\}^\{H\},\\qquad d=1,\\dots,D\.\(19\)A fixed sinusoidal positional encoding is added, followed by a single\-layer Pre\-LayerNorm Transformer and four causal TCN blocks with dilations\{1,2,4,8\}\\\{1,2,4,8\\\}\. This produces a per\-variable endpoint representation𝐠t,d∈ℝH\\mathbf\{g\}\_\{t,d\}\\in\\mathbb\{R\}^\{H\}\. AnoMix\-ZS then aggregates variables with learned attention weights: at,d=exp\(𝐰a⊤𝐠t,d\)∑r=1Dexp\(𝐰a⊤𝐠t,r\),𝐡t=∑d=1Dat,d𝐠t,d\.a\_\{t,d\}=\\frac\{\\exp\(\\mathbf\{w\}\_\{a\}^\{\\top\}\\mathbf\{g\}\_\{t,d\}\)\}\{\\sum\_\{r=1\}^\{D\}\\exp\(\\mathbf\{w\}\_\{a\}^\{\\top\}\\mathbf\{g\}\_\{t,r\}\)\},\\qquad\\mathbf\{h\}\_\{t\}=\\sum\_\{d=1\}^\{D\}a\_\{t,d\}\\mathbf\{g\}\_\{t,d\}\.\(20\)The same scalar score head then computesz^t=𝐰o⊤𝐡t\+bo\\hat\{z\}\_\{t\}=\\mathbf\{w\}\_\{o\}^\{\\top\}\\mathbf\{h\}\_\{t\}\+b\_\{o\}\. Thus, AnoMix\-ZS changes only the encoder used to obtain the endpoint representation, while preserving the endpoint\-centered scoring template and the CoRank objective\. WithH=64H=64, one Transformer layer, four TCN blocks, and one score head, AnoMix\-ZS has 83k parameters independent ofDD\. #### Zero\-Shot Training\. AnoMix\-ZS uses the same CoRank objective as the main method\. For each target dataset𝒟⋆\\mathcal\{D\}^\{\\star\}, the student is trained on the concatenation of training windows from the remaining six benchmark datasets and evaluated on𝒟⋆\\mathcal\{D\}^\{\\star\}with no target\-dataset fine\-tuning, no target teacher scores, and no target training data\. Teacher scores on the training mixture are obtained from the same stored per\-dataset teacher checkpoints used in the main experiments, and CoRank supervision is constructed only within each dataset’s mini\-batch so that teacher normalizations remain dataset\-consistent\. ## Appendix CPseudocode Algorithm[1](https://arxiv.org/html/2610.29063#alg1)summarizes the full AnoMix pipeline used in the main paper\. It separates offline teacher preprocessing, single\-head student training with CoRank, and teacher\-free inference\. Algorithm 1AnoMix Training and Inference1:Input: 𝐗train∈ℝT×D\\mathbf\{X\}\_\{\\mathrm\{train\}\}\\in\\mathbb\{R\}^\{T\\times D\}, 𝐗test∈ℝT′×D\\mathbf\{X\}\_\{\\mathrm\{test\}\}\\in\\mathbb\{R\}^\{T^\{\\prime\}\\times D\}, teachers \{fm\}m=1M\\\{f\_\{m\}\\\}\_\{m=1\}^\{M\}, window length LL, batch size BB, epochs EE, learning rate η\\eta, threshold δ\\delta 2:Output:Student gθg\_\{\\theta\}and anomaly scores \{st\}t=LT′\\\{s\_\{t\}\\\}\_\{t=L\}^\{T^\{\\prime\}\} 3:Stage 1\. Offline teacher preprocessing 4:for m=1,…,Mm=1,\\dots,Mdo 5:Compute teacher scores z\(m\)←fm\(𝐗train\)z^\{\(m\)\}\\leftarrow f\_\{m\}\(\\mathbf\{X\}\_\{\\mathrm\{train\}\}\) 6:Min\-max normalize z\(m\)z^\{\(m\)\}on 𝐗train\\mathbf\{X\}\_\{\\mathrm\{train\}\}to obtain z~\(m\)\\tilde\{z\}^\{\(m\)\} 7:endfor 8:Stage 2\. Single\-head student training with CoRank 9: 𝒟←\{\(𝐖t,𝐳~t\)\}t=LT\\mathcal\{D\}\\leftarrow\\\{\(\\mathbf\{W\}\_\{t\},\\tilde\{\\mathbf\{z\}\}\_\{t\}\)\\\}\_\{t=L\}^\{T\}, where 𝐳~t=\(z~t\(1\),…,z~t\(M\)\)\\tilde\{\\mathbf\{z\}\}\_\{t\}=\(\\tilde\{z\}\_\{t\}^\{\(1\)\},\\dots,\\tilde\{z\}\_\{t\}^\{\(M\)\}\) 10:Initialize gθ:ℝL×D→ℝg\_\{\\theta\}:\\mathbb\{R\}^\{L\\times D\}\\to\\mathbb\{R\}as the TCN student 11:Initialize AdamW with learning rate η\\etaand cosine annealing for EEepochs 12:for e=1,…,Ee=1,\\dots,Edo 13:formini\-batch ℬ=\{\(𝐖i,𝐳~i\)\}i=1B∼𝒟\\mathcal\{B\}=\\\{\(\\mathbf\{W\}\_\{i\},\\tilde\{\\mathbf\{z\}\}\_\{i\}\)\\\}\_\{i=1\}^\{B\}\\sim\\mathcal\{D\}do 14: z^i←gθ\(𝐖i\)\\hat\{z\}\_\{i\}\\leftarrow g\_\{\\theta\}\(\\mathbf\{W\}\_\{i\}\)for all i∈\[B\]i\\in\[B\] 15:Enumerate all unordered pairs \(i,j\)\(i,j\)with i<ji<j 16: 𝚫ij←𝐳~i−𝐳~j\\boldsymbol\{\\Delta\}\_\{ij\}\\leftarrow\\tilde\{\\mathbf\{z\}\}\_\{i\}\-\\tilde\{\\mathbf\{z\}\}\_\{j\}for each pair 17: 𝒫←\{\(i,j\):i<j,maxm\|Δij\(m\)\|\>δ\}\\mathcal\{P\}\\leftarrow\\\{\(i,j\):i<j,\\ \\max\_\{m\}\|\\Delta\_\{ij\}^\{\(m\)\}\|\>\\delta\\\} 18:if 𝒫=∅\\mathcal\{P\}=\\emptysetthen 19:continue 20:endif 21:foreach \(i,j\)∈𝒫\(i,j\)\\in\\mathcal\{P\}do 22: yij←sgn\(∑m=1MΔij\(m\)\)y\_\{ij\}\\leftarrow\\operatorname\{sgn\}\\left\(\\sum\_\{m=1\}^\{M\}\\Delta\_\{ij\}^\{\(m\)\}\\right\) 23: cij←\|∑m=1MΔij\(m\)\|/∑m=1M\|Δij\(m\)\|c\_\{ij\}\\leftarrow\\left\|\\sum\_\{m=1\}^\{M\}\\Delta\_\{ij\}^\{\(m\)\}\\right\|/\\sum\_\{m=1\}^\{M\}\|\\Delta\_\{ij\}^\{\(m\)\}\| 24: dij←z^i−z^jd\_\{ij\}\\leftarrow\\hat\{z\}\_\{i\}\-\\hat\{z\}\_\{j\} 25:endfor 26: ℒCoRank←1\|𝒫\|∑\(i,j\)∈𝒫cijlog\(1\+exp\(−yijdij\)\)\\mathcal\{L\}\_\{\\mathrm\{CoRank\}\}\\leftarrow\\frac\{1\}\{\|\\mathcal\{P\}\|\}\\sum\_\{\(i,j\)\\in\\mathcal\{P\}\}c\_\{ij\}\\log\(1\+\\exp\(\-y\_\{ij\}d\_\{ij\}\)\) 27: θ←θ−η∇θℒCoRank\\theta\\leftarrow\\theta\-\\eta\\nabla\_\{\\theta\}\\mathcal\{L\}\_\{\\mathrm\{CoRank\}\} 28:endfor 29:endfor 30:Stage 3\. Teacher\-free inference 31:for t=L,…,T′t=L,\\dots,T^\{\\prime\}do 32: st←gθ\(𝐖ttest\)s\_\{t\}\\leftarrow g\_\{\\theta\}\(\\mathbf\{W\}\_\{t\}^\{\\mathrm\{test\}\}\) 33:endfor 34:return \{st\}t=LT′\\\{s\_\{t\}\\\}\_\{t=L\}^\{T^\{\\prime\}\} ## Appendix DVisualization Figure[S1](https://arxiv.org/html/2610.29063#A4.F1)visualizes the test\-time anomaly scores produced by the three Sel\-3 teachers \(SARAD, CrossAD, OracleAD\) and AnoMix on the seven benchmark datasets\. Each series is min\-max normalized to\[0,1\]\[0,1\]for direct visual comparison, and anomaly segments are shaded in red\. Across these datasets, AnoMix can be compared directly with the teacher score sequences and often assigns high scores to labeled anomaly segments without simply copying any single teacher\. Figure S1:Test\-time anomaly scores\.Rows correspond to the seven benchmark datasets and columns to SARAD, CrossAD, OracleAD, and AnoMix\. Scores are min\-max normalized to\[0,1\]\[0,1\]\. Red shaded bands indicate labeled anomaly segments\. ## Appendix EFull Results #### PR Metrics\. Table[S1](https://arxiv.org/html/2610.29063#A5.T1)reports VUS\-PR, AUC\-PR, and R\-AUC\-PR \(5\-seed mean, %\)\. Table S1:PR metrics on the seven benchmark datasets \(5\-seed mean, %\)\.Boldfaceindicates the best result in each column, andunderlinedvalues indicate the second\-best result\. #### ROC Metrics\. Table[S2](https://arxiv.org/html/2610.29063#A5.T2)reports VUS\-ROC, AUC\-ROC, and R\-AUC\-ROC \(5\-seed mean, %\)\. Table S2:ROC metrics on the seven benchmark datasets \(5\-seed mean, %\)\.Boldfaceindicates the best result in each column, andunderlinedvalues indicate the second\-best result\. #### F1\-Based Metrics\. Table[S3](https://arxiv.org/html/2610.29063#A5.T3)reports point\-wise F1, Event\-F1\[[50](https://arxiv.org/html/2610.29063#bib.bib50)\], and Aff\-F\[[51](https://arxiv.org/html/2610.29063#bib.bib51)\]\(5\-seed mean, %\)\. Table S3:F1\-based metrics on the seven benchmark datasets \(5\-seed mean, %\)\.Boldfaceindicates the best result in each column, andunderlinedvalues indicate the second\-best result\. ## Appendix FDatasets Table[S4](https://arxiv.org/html/2610.29063#A6.T4)summarizes the seven multivariate time series anomaly detection datasets used in the paper\. We selected these datasets to evaluate AnoMix across diverse benchmark conditions, including different training\-set sizes, anomaly ratios, event counts, and numbers of variates\. We treat subsets from the same benchmark source as separate benchmark instances rather than different splits of a single dataset, since they differ in dimensionality and data distribution, following prior works\[[3](https://arxiv.org/html/2610.29063#bib.bib3),[52](https://arxiv.org/html/2610.29063#bib.bib52),[53](https://arxiv.org/html/2610.29063#bib.bib53)\]\. For datasets with multiple available subsets, the subset was fixed before evaluating AnoMix by choosing among subsets with sufficient anomaly ratios for evaluation\. The first six are sourced from TSB\-AD\[[6](https://arxiv.org/html/2610.29063#bib.bib6)\], which provides standardized preprocessing, train/test splits, and anomaly labels, and SWAN is sourced from TAB\[[7](https://arxiv.org/html/2610.29063#bib.bib7)\]\. Table S4:Statistics of the seven benchmark datasets\.- •PSM\[[1](https://arxiv.org/html/2610.29063#bib.bib1)\]: Server\-monitoring metrics collected from eBay’s production infrastructure\. The 25 channels cover CPU, memory, disk, and network usage, with anomalies corresponding to real software incidents\. - •SWaT\[[2](https://arxiv.org/html/2610.29063#bib.bib2)\]: Sensor and actuator readings from the Secure Water Treatment testbed\. The 66 channels cover flow, tank\-level, valve, and chemical\-dosing signals under cyber\-physical attacks\. We use the processed TSB\-AD version, while the original SWaT data are distributed by iTrust and require an access request through the official dataset website before download:[https://itrust\.sutd\.edu\.sg/itrust\-labs\_datasets/dataset\_info/](https://itrust.sutd.edu.sg/itrust-labs_datasets/dataset_info/)\. - •Exathlon\[[35](https://arxiv.org/html/2610.29063#bib.bib35)\]: Application\-level metrics from distributed stream\-processing jobs running on Apache Spark\. The 31 channels include job latency, throughput, CPU utilization, and garbage\-collection statistics, and anomalies are caused by resource contention, configuration errors, and infrastructure failures\. - •SMD\[[3](https://arxiv.org/html/2610.29063#bib.bib3)\]: Server Machine Dataset consisting of 38 monitoring metrics \(CPU, memory, disk, network\) collected from a large Internet company\. - •SMAP\[[4](https://arxiv.org/html/2610.29063#bib.bib4)\]: Telemetry data from NASA’s Soil Moisture Active Passive satellite\. The 25 channels include sensor readings and actuator commands, with anomalies corresponding to sensor malfunctions and actuator failures\. - •Daphnet\[[5](https://arxiv.org/html/2610.29063#bib.bib5)\]: Wearable accelerometer data from Parkinson’s disease patients\. Three tri\-axial accelerometers produce 9 channels, and anomalies correspond to freezing\-of\-gait episodes\. - •SWAN\[[36](https://arxiv.org/html/2610.29063#bib.bib36)\]: SHARP magnetic\-field metrics from NASA SDO/HMI used for solar flare monitoring\. The 38 channels describe magnetic\-field properties, region geometry, and X\-ray flux history, with anomalies corresponding to active regions associated with elevated flare activity\. ## Appendix GMetrics We report threshold\-independent PR and ROC metrics in three forms\. The threshold\-independent metrics capture complementary aspects of TSAD performance, including pointwise discrimination, tolerance to small temporal offsets, and ranking quality across the full score range\. They summarize performance across all possible score thresholds and therefore evaluate the quality of the anomaly scores themselves rather than one specific threshold choice\. - •AUC\-PR, AUC\-ROC\[[39](https://arxiv.org/html/2610.29063#bib.bib39),[38](https://arxiv.org/html/2610.29063#bib.bib38)\]: Standard pointwise areas under the Precision\-Recall and ROC curves\. AUC\-PR is especially informative under severe class imbalance, while AUC\-ROC summarizes global ranking quality over normal and anomalous points\. - •R\-AUC\-PR, R\-AUC\-ROC\[[40](https://arxiv.org/html/2610.29063#bib.bib40),[37](https://arxiv.org/html/2610.29063#bib.bib37)\]: Range\-based variants that relax exact timestamp matching and instead credit predictions that fall within a tolerance window around each anomaly segment\. They are therefore more appropriate when slight temporal delays or advances should not be penalized as harshly as pointwise errors\. - •VUS\-PR, VUS\-ROC\[[37](https://arxiv.org/html/2610.29063#bib.bib37)\]: Volume Under the Surface extends range\-based AUC by integrating not only over score thresholds but also over tolerance\-window sizes\. VUS therefore provides a broader threshold\-free view of time\-series detection quality than either standard or fixed\-range AUC\. ## Appendix HBaselines and Experimental Protocol #### Deep TSAD Baselines\. - •OmniAnomaly\(KDD 2019\)\[[3](https://arxiv.org/html/2610.29063#bib.bib3)\]: a stochastic reconstruction model that combines recurrent dynamics with a variational latent\-variable formulation for sequence anomaly detection\. - •USAD\(KDD 2020\)\[[9](https://arxiv.org/html/2610.29063#bib.bib9)\]: an unsupervised adversarial autoencoder that detects anomalies through reconstruction inconsistency under dual decoder objectives\. - •Anomaly Transformer\(ICLR 2022\)\[[15](https://arxiv.org/html/2610.29063#bib.bib15)\]: a Transformer\-based detector that uses association discrepancy to identify unusual attention structure\. - •TranAD\(VLDB 2022\)\[[10](https://arxiv.org/html/2610.29063#bib.bib10)\]: a forecasting\-oriented Transformer that predicts future behavior and flags deviations from those predictions\. - •TimesNet\(ICLR 2023\)\[[11](https://arxiv.org/html/2610.29063#bib.bib11)\]: a general time\-series backbone that models multi\-period temporal variation and is used here as a forecasting\-style anomaly detector\. - •MOMENT\(ICML 2024\)\[[42](https://arxiv.org/html/2610.29063#bib.bib42)\]: a pretrained time\-series foundation model used in our target\-dataset benchmark as a foundation\-model\-based anomaly baseline\. For Table[1](https://arxiv.org/html/2610.29063#S4.T1), we follow the TSB\-AD wrapper convention\[[6](https://arxiv.org/html/2610.29063#bib.bib6)\]: the pretrained MOMENT backbone is kept frozen and a lightweight reconstruction head is fine\-tuned for22epochs on each target training split\. - •SARAD\(NeurIPS 2024\)\[[41](https://arxiv.org/html/2610.29063#bib.bib41)\]: a spatial association\-aware TSAD method that detects anomalies through reconstruction in association space\. - •CATCH\(ICLR 2025\)\[[43](https://arxiv.org/html/2610.29063#bib.bib43)\]: a frequency\-patching TSAD framework that reconstructs spectral patterns while modeling channel interactions\. - •CrossAD\(NeurIPS 2025\)\[[14](https://arxiv.org/html/2610.29063#bib.bib14)\]: a multi\-scale detector that models cross\-scale associations and cross\-window temporal context\. - •OracleAD\(NeurIPS 2025\)\[[12](https://arxiv.org/html/2610.29063#bib.bib12)\]: a deviation\-based detector that scores anomalies by measuring departure from learned normality\. #### Score\-Ensemble Baselines\. - •Mean,Max, andMedian: pointwise aggregation of normalized teacher scores using fixed reduction rules\. - •Rank Fusion: conversion of each teacher score sequence into percentile ranks, followed by averaging of those ranks\. - •RRF\(SIGIR 2009\)\[[44](https://arxiv.org/html/2610.29063#bib.bib44)\]: aggregation of teacher rankings through reciprocal\-rank weighting\. #### Zero\-Shot Transfer Baselines\. - •MOMENT\(ICML 2024\)\[[42](https://arxiv.org/html/2610.29063#bib.bib42)\]: evaluated in the zero\-shot transfer experiment without fitting any component on the held\-out target dataset\. - •MOIRAI\(ICML 2024\)\[[47](https://arxiv.org/html/2610.29063#bib.bib47)\]: a universal pretrained forecasting model designed for broad transfer across domains and sampling regimes\. - •TimesFM\(ICML 2024\)\[[45](https://arxiv.org/html/2610.29063#bib.bib45)\]: a decoder\-style foundation model trained primarily for large\-scale forecasting transfer\. - •Lag\-Llama\(NeurIPS 2023 Workshop\)\[[48](https://arxiv.org/html/2610.29063#bib.bib48)\]: a generative foundation model for probabilistic time\-series forecasting\. - •Chronos\(TMLR 2024\)\[[46](https://arxiv.org/html/2610.29063#bib.bib46)\]: a model that casts time\-series forecasting into a language\-modeling\-style token prediction problem\. - •DADA\(ICLR 2025\)\[[49](https://arxiv.org/html/2610.29063#bib.bib49)\]: a TSAD\-specific foundation model pretrained for zero\-shot anomaly detection with adaptive bottlenecks and dual adversarial decoders\. #### Code Bases\. - • - • - • - • - • - • - • #### Shared Data and Evaluation Controls\. We reran all ten target\-dataset baselines and teachers on the same dataset files and fixed train/test splits; no published benchmark values were reused\. Five\-run comparisons use seeds\{42,123,456,789,1024\}\\\{42,123,456,789,1024\\\}, and training uses no anomaly labels\. All scores use the common TSB\-AD metric implementation with evaluation window100100for range\-based and VUS metrics, independently of the model’s input\-window length\. #### Model\-Specific Settings and Optimization\. The TSB\-AD implementations and local adapters use recommended baseline configurations without per\-dataset hyperparameter searches\. Table[S5](https://arxiv.org/html/2610.29063#A8.T5)summarizes the target\-dataset benchmark configuration; windowing, normalization, epoch limits, and checkpoint restoration remain implementation\-specific\. Except for MOMENT’s fixed adaptation schedule, trainable baselines and teachers use the last10%10\\%of the training split for validation and early stopping with patience33\. OmniAnomaly, TimesNet, SARAD, CATCH, and OracleAD share a training loop with at most1010epochs, patience33, and restoration of the lowest\-validation\-loss checkpoint\. USAD, Anomaly Transformer, TranAD, and CrossAD use their wrappers’ stopping and checkpoint rules\. For Table[1](https://arxiv.org/html/2610.29063#S4.T1), MOMENT fine\-tunes its reconstruction head for a fixed22epochs and uses the final checkpoint, without early stopping; its pretrained backbone remains frozen\. In Table[4](https://arxiv.org/html/2610.29063#S4.T4), MOMENT instead uses the pretrained checkpoint without any target\-dataset fine\-tuning\. AnoMix uses the final checkpoint after1010epochs; Appendix[J](https://arxiv.org/html/2610.29063#A10)gives its per\-dataset settings and training\-loss\-based learning\-rate choice\. Table S5:Baseline configurations for Table[1](https://arxiv.org/html/2610.29063#S4.T1)\. #### Teacher Checkpoints and Student Seeds\. For each dataset and teacher, a seed from the common seed set is fixed in advance, without performance\-based seed selection\. Its checkpoint supplies cached training scores, min–max normalized using training\-score statistics and reused across five student seeds\. Student variability in Appendix[O](https://arxiv.org/html/2610.29063#A15)is conditional on this fixed supervision and excludes teacher\-retraining variability\. Each standalone teacher row in Table[1](https://arxiv.org/html/2610.29063#S4.T1)instead averages five teacher runs\. #### Fixed\-Checkpoint Transfer Baselines\. The six foundation baselines in Table[4](https://arxiv.org/html/2610.29063#S4.T4)use fixed released checkpoints and model\-specific preprocessing without target\-dataset weight updates\. Only AnoMix\-ZS is trained on the source datasets with five seeds; Appendix[O](https://arxiv.org/html/2610.29063#A15)reports its standard deviations\. ## Appendix ITeacher Sets and Robustness ### I\.1Teacher\-Set Selection The main teacher\-set study considers three types of configuration\.*Sel\-3*is the fixed benchmark teacher set used by AnoMix in the main experiments and consists of SARAD, CrossAD, and OracleAD\.*LOO Best\-3*denotes leave\-one\-out teacher selection, where the target dataset is excluded and teachers are ranked only by their average performance on the remaining six datasets in the seven\-task analysis\.*All\-10*uses the entire teacher pool without selection\. The purpose of this comparison is not to derive a universal teacher\-selection rule, but to clarify what the fixed benchmark choice represents and how sensitive AnoMix is to alternative teacher pools\. The fixed*Sel\-3*configuration was chosen before evaluating AnoMix for analysis convenience and is intended as a compact and representative benchmark setting rather than a claimed optimum\. It is formed by taking the three most recent state\-of\-the\-art TSAD detectors in the teacher pool and therefore combines SARAD from association\-space reconstruction, CrossAD from cross\-scale association modeling, and OracleAD from deviation\-based scoring\. This choice keeps the training\-time teacher pool small while still covering heterogeneous anomaly\-scoring behavior\. It also matches the design philosophy of AnoMix, which aims to distill comparative supervision from complementary teachers into a single deployable student\. The leave\-one\-out analysis is useful because it removes target\-dataset information from teacher selection\. The resulting per\-target ranking is shown in Table[S6](https://arxiv.org/html/2610.29063#A9.T6)\. Under this protocol, SARAD and CrossAD occupy the top two positions on six of the seven target datasets, indicating that they are the most reliable cross\-dataset teachers in the candidate pool\. The third position is typically taken by OracleAD or CATCH\. This pattern helps explain why the fixed benchmark three\-teacher set remains competitive even when compared with teacher sets obtained from target\-excluded ranking\. Table S6:LOO teacher ranking on the seven benchmark datasets\. For each target dataset, teachers are ranked by average VUS\-PR \(%\) on the other six datasets\. Omni denotes OmniAnomaly, and A\.T denotes Anomaly Transformer\.Boldfaceindicates the top three teachers for each target dataset\. ### I\.2Teacher\-Pool Robustness We stress\-test teacher quality and score\-sequence homogeneity on all seven datasets using five student seeds, with the same TCN, CoRank objective, and training protocol as the main experiment\. HML\-3 combines SARAD, OmniAnomaly, and Anomaly Transformer, spanning high, middle, and low performance tiers\. Mid\-3 contains USAD, OracleAD, and OmniAnomaly, while Bottom\-3 contains TimesNet, MOMENT, and Anomaly Transformer\. These pools remain fixed across datasets\. Corr\-3 selects the three\-teacher subset with the highest mean pairwise Spearman correlation on each dataset’s unlabeled training\-score sequences, using neither anomaly labels nor target test scores\. For each pool, we compare AnoMix with the best constituent teacher and the normalized mean\-score ensemble built from the same teacher checkpoints\. Table[S7](https://arxiv.org/html/2610.29063#A9.T7)reports macro averages over the seven datasets\. The standard deviation is computed across the five seed\-level macro averages\. Mean Spearman measures pairwise teacher correlation on training scores, and pair support is the fraction of candidate training pairs satisfyingmaxm\|Δij\(m\)\|\>δ\\max\_\{m\}\|\\Delta\_\{ij\}^\{\(m\)\}\|\>\\delta\. Gains are averaged against each dataset’s best constituent teacher and mean ensemble\. Table S7:Teacher\-pool stress test\. VUS\-PR is reported as mean±\\pmstandard deviation \(%\), and gains are in %pt\.AnoMix exceeds both comparators with mixed\-quality, medium\-quality, and highly correlated pools\. HML\-3 improves on its best teacher by9\.659\.65%pt despite combining detectors from different quality tiers\. Bottom\-3, however, provides only3\.9%3\.9\\%pair support and falls below both comparators, exposing a failure case with weak teachers and sparse pair coverage\. Sel\-3 also provides broader pair support than Corr\-3 and achieves higher student performance\. This is consistent with complementary teachers supplying informative gaps on different pairs, although these comparisons do not isolate the effects of teacher quality and coverage\. High rank correlation does not imply identical score gaps, so Corr\-3 can still supply distinct pairwise signals\. Together with the target\-excluded LOO analysis and All\-10 control, these results broaden the evidence beyond the fixed Sel\-3 pool\. The tested pools are not an average over random subsets, and their success does not establish robustness to shared systematic teacher errors\. Agreement based only on teacher outputs cannot distinguish unanimously correct preferences from unanimously incorrect ones, as discussed in Appendix[Q](https://arxiv.org/html/2610.29063#A17)\. ## Appendix JImplementation Details Every reported run uses the single\-head TCN student described in Appendix[B](https://arxiv.org/html/2610.29063#A2)\. The student has hidden dimensionH=64H\\\!=\\\!64, six causal blocks with dilations\{1,2,4,8,16,32\}\\\{1,2,4,8,16,32\\\}, kernel sizek=3k\\\!=\\\!3, dropout0\.10\.1, and under 80k parameters on the seven benchmark settings\. Its receptive field is 127 time steps, and most datasets therefore use a window size of 127 in order to fully use the available temporal context\. Student training uses only the training split and no anomaly labels\. We train for 10 epochs with AdamW, weight decay10−410^\{\-4\}, cosine annealing, and a CoRank score\-gap thresholdδ=0\.1\\delta\\\!=\\\!0\.1\. Within each mini\-batch, CoRank evaluates all unordered non\-identical time\-point pairs and excludes reverse duplicates\. Student results use five random seeds under fixed data splits and fixed teacher\-score caches, so their standard deviations measure student optimization variability conditional on the teacher supervision\. The zero\-shot foundation baselines use fixed released checkpoints rather than five independently trained models\. Table[S8](https://arxiv.org/html/2610.29063#A10.T8)lists the remaining per\-dataset choices\. We select per\-dataset learning rates based on training\-loss stability, choosing the rate at which the CoRank loss decreases gradually rather than collapsing to near zero within a few epochs\. For SMD and Daphnet, the loss converges rapidly at the default10−310^\{\-3\}, so we use a lower learning rate of10−510^\{\-5\}\. Table S8:Per\-dataset student hyperparameters\.Figure[S2](https://arxiv.org/html/2610.29063#A10.F2)reports hyperparameter sensitivity with respect to window sizeLL, score\-gap thresholdδ\\delta, and batch size\. Window size and batch size are largely flat across the moderate values used in practice, but performance collapses atL=10L\\\!=\\\!10, where the receptive field is too short to reflect meaningful temporal context\. The score\-gap threshold shows the most informative pattern, with small positive values essentially tied at the optimum, whileδ≥0\.2\\delta\\geq 0\.2drops sharply by roughly seven points\. This indicates that the threshold acts as a meaningful filter on small teacher score gaps\. Small positive thresholds retain informative comparisons while suppressing ambiguous pairs, whereas larger thresholds discard too many teacher\-derived comparisons and noticeably weaken supervision\. The reported runs use the dataset\-specific defaults in Table[S8](https://arxiv.org/html/2610.29063#A10.T8)\. For a new dataset, we recommend choosing within the near\-optimal rangesL∈\[64,127\]L\\in\[64,127\],δ∈\[0\.05,0\.1\]\\delta\\in\[0\.05,0\.1\], andbs∈\[32,64\]\\mathrm\{bs\}\\in\[32,64\], where each setting stays within roughly 1%pt of the macro optimum across the seven datasets\. Figure S2:Macro\-average hyperparameter sensitivity across the seven datasets\. The line denotes the macro mean across datasets, and the shaded band denotes the±1\\pm 1standard deviation across five random seeds\. ## Appendix KOptimization Figure[S3](https://arxiv.org/html/2610.29063#A11.F3)shows the per\-epoch CoRank training loss for each of the original six benchmark datasets, averaged over five random seeds, with the shaded region denoting the±1\\pm 1standard deviation across five random seeds\. All six curves decrease monotonically under the shared 10\-epoch budget, and the across\-seed band is narrow on every dataset\. Some datasets show faster early decay than others, but the overall training behavior is stable across these tasks\. Figure S3:AnoMix CoRank training loss over 10 epochs on each of the six benchmark datasets\. The line denotes the five\-seed mean, and the shaded region denotes the±1\\pm 1standard deviation across five random seeds\. ## Appendix LModel Complexity and Inference Efficiency Table[S9](https://arxiv.org/html/2610.29063#A12.T9)compares model complexity, parameter count, peak GPU memory during single\-sample inference, and FLOPs per forward pass on a standardized synthetic input \(L=100L\{=\}100,D=200D\{=\}200\)\. We use a common input size rather than a specific benchmark to isolate architectural cost from per\-dataset feature count\. Peak memory is measured withtorch\.cuda\.max\_memory\_allocatedafter warmup\. We estimate FLOPs withfvcorewhen tracing is supported and useptflopsestimates for LSTM modules thatfvcorecannot trace\. The complexity column drops fixed model hyperparameters such as hidden dimension and reports scaling only in the data\-side quantities\. AnoMix requires only8\.658\.65M FLOPs per window and9\.599\.59MB of peak GPU memory at inference, corresponding to127,000×127\{,\}000\\timesfewer FLOPs than MOMENT and93×93\\timeslower peak memory than OracleAD\. These measurements describe deployment\-time inference with the student alone\. They exclude the offline costs of training or obtaining the teachers, generating and caching their training scores, and training the student\. AnoMix therefore requires offline teacher computation; the reported inference savings do not imply lower end\-to\-end training cost than training a single detector\. Table S9:Model complexity and single\-model inference cost on synthetic input \(L=100L\{=\}100,D=200D\{=\}200, batch=1\), excluding offline training and teacher scoring\.LL=window,DD=features,PP=patch count\.All reported efficiency measurements and student training runs were performed on a single local workstation\. Table[S10](https://arxiv.org/html/2610.29063#A12.T10)summarizes the system configuration\. Table S10:System configuration used for the reported experiments\. ## Appendix MAdditional Ablations Figure S4:Ablation on teacher score normalization \(a\) and score\-gap threshold selection \(b\)\. Each bar is the seven\-dataset macro VUS\-PR averaged over five seeds\. Default settings are colored in dark blue\.This appendix reports two additional ablations on design choices that are fixed in the main experiments\. Figure[S4](https://arxiv.org/html/2610.29063#A13.F4)\(a\) and Figure[S4](https://arxiv.org/html/2610.29063#A13.F4)\(b\) both report the seven\-dataset macro VUS\-PR averaged over five seeds\. #### Teacher Score Normalization\. Figure[S4](https://arxiv.org/html/2610.29063#A13.F4)\(a\) compares three ways of normalizing each teacher’s training scores before they enter the CoRank objective\. Min\-max maps each teacher’s training\-set range to\[0,1\]\[0,1\]\. Z\-score normalizes by the training mean and standard deviation\. Rank converts each score to its empirical CDF position in\[0,1\]\[0,1\]\. Min\-max attains the highest macro VUS\-PR, with z\-score and rank both within roughly one point\. #### Score\-Gap Threshold Selection\. CoRank uses the score\-gap thresholdδ\\deltato decide whether a time\-point pair is informative enough for training\. In the default setting, a pair\(i,j\)\(i,j\)is retained when at least one teacher has a normalized score gap larger thanδ=0\.1\\delta=0\.1, namely whenmaxm\|Δij\(m\)\|\>δ\\max\_\{m\}\|\\Delta\_\{ij\}^\{\(m\)\}\|\>\\delta\. This shared threshold is simple, but it can be less appropriate if different teachers have very different score\-gap distributions\. Figure[S4](https://arxiv.org/html/2610.29063#A13.F4)\(b\) asks whether replacing the shared threshold with teacher\-specific thresholds improves performance\. We compare the default Fixed rule with two alternatives computed from training\-set score gaps\. Teacher Mean setsδm=𝔼i,j\[\|Δij\(m\)\|\]\\delta\_\{m\}=\\mathbb\{E\}\_\{i,j\}\[\|\\Delta\_\{ij\}^\{\(m\)\}\|\], which filters out pairs below teachermm’s average separation\. Quantile setsδm\\delta\_\{m\}to the2525thpercentile of the same gap distribution, so that each teacher filters the same fraction of small\-gap pairs\. Both alternatives are parameter\-free and use no anomaly labels\. On the seven\-dataset macro VUS\-PR, the fixed scalar matches or slightly exceeds both per\-teacher alternatives\. This suggests that, after min\-max normalization, a sharedδ=0\.1\\delta=0\.1is sufficient in our setting\. Additional teacher\-specific thresholding therefore provides little benefit in this experiment\. ## Appendix NTeacher Alignment and Consensus Confidence We examine where CoRank obtains supervision from the Sel\-3 teachers and how teacher agreement relates to student performance\. Teacher alignment is defined asaij=\(1\+cij\)/2a\_\{ij\}=\(1\+c\_\{ij\}\)/2, ranging from50%50\\%for balanced opposing score\-gap magnitudes to100%100\\%when all nonzero gaps share the same direction\. #### Training\-Pair Distribution\. We sample two million candidate pairs per dataset and apply the CoRank support rule withδ=0\.1\\delta=0\.1\. Table[S11](https://arxiv.org/html/2610.29063#A14.T11)reports confidence distributions conditional on retention\. Most retained pairs have high confidence, while SWaT and SMD contain larger shares of conflicting comparisons\. Table S11:Confidence distribution among retained training pairs \(%\)\. Rows sum to100%100\\%up to rounding\. #### Confidence\-Filtered Training\. We retrain AnoMix on SWaT with five seeds, keeping the architecture, pair support, optimizer, and training schedule fixed\. For each cutoff, loss terms below that confidence receive zero weight, while the original loss denominator is unchanged\. Full denotes the matched unfiltered run\. Table[S12](https://arxiv.org/html/2610.29063#A14.T12)shows that every cutoff lowers mean VUS\-ROC and VUS\-PR relative to full CoRank\. This supports retaining comparisons with small but nonzero confidence and weighting them softly\. The VUS\-PR trend is not monotonic, and the variation across seeds does not establish a separate contribution for each interval\. Table S12:Confidence\-filtered training on SWaT \(5\-seed mean±\\pmstandard deviation, %\)\.#### Alignment and Pairwise Accuracy\. We sample two million anomaly–normal test pairs per dataset, retain pairs under the same score\-gap rule, and group them by teacher alignment using training\-statistic score normalization\. A preference is correct when the anomalous point receives the higher score, with half credit for ties\. Table[S13](https://arxiv.org/html/2610.29063#A14.T13)compares the mean individual\-teacher accuracy with the seed\-4242student’s accuracy, macro\-averaged over the seven datasets\. AnoMix is more accurate in every interval, including those with strongly conflicting teacher gaps\. This is a label\-aware post\-hoc diagnostic rather than a causal training analysis\. Teacher test scores and test labels are used only for this diagnostic and never to train the student\. Table S13:Pairwise accuracy by teacher alignment \(seven\-dataset macro average, %\)\. ## Appendix OStatistical Significance This appendix reports variability across the five random seeds\{42,123,456,789,1024\}\\\{42,123,456,789,1024\\\}for Tables[1](https://arxiv.org/html/2610.29063#S4.T1)–[4](https://arxiv.org/html/2610.29063#S4.T4)\. Standard deviations use the population convention \(divisor55\), matching the experiment summaries, and are reported in %pt\. An entry of0\.000\.00may reflect rounding of a small nonzero deviation\. Table S14:Standard deviation across five random seeds \(%\) for the main results in Table[1](https://arxiv.org/html/2610.29063#S4.T1)\.Table S15:Standard deviation across five random seeds \(%\) for the score\-ensemble comparison in Table[2](https://arxiv.org/html/2610.29063#S4.T2)\.#### Teacher\-Set Variants\. Table[S16](https://arxiv.org/html/2610.29063#A15.T16)reports per\-dataset standard deviations for Table[3](https://arxiv.org/html/2610.29063#S4.T3), with teacher supervision fixed across student seeds\. SWAN LOO\-3 and Sel\-3 use the same teachers and student runs\. Table S16:Per\-dataset standard deviations \(%pt\) for the teacher sets in Table[3](https://arxiv.org/html/2610.29063#S4.T3)\. #### Zero\-Shot Transfer\. Table[S17](https://arxiv.org/html/2610.29063#A15.T17)reports per\-dataset standard deviations for AnoMix\-ZS in Table[4](https://arxiv.org/html/2610.29063#S4.T4)\. Fixed\-checkpoint foundation baselines have no across\-training\-seed standard deviation\. Table S17:Per\-dataset standard deviations \(%pt\) for AnoMix\-ZS in Table[4](https://arxiv.org/html/2610.29063#S4.T4)\. ## Appendix PBroader Impact AnoMix can reduce the practical cost of deploying strong time\-series anomaly detection by replacing multi\-model teacher ensembles with a single lightweight student\. This is especially useful in monitoring settings where inference latency, memory footprint, and maintenance cost matter, such as industrial sensor systems, cyber\-physical infrastructure, and edge devices\. This makes the framework relevant to on\-device AI for self\-diagnosis in robots, satellites, and manufacturing systems, where local anomaly detection can support earlier fault detection without continuously running large detector ensembles\. By distilling complementary teacher scoring principles into one deployable model, AnoMix can make stronger anomaly detection more accessible in environments where running several detectors in parallel is difficult\. The framework also offers a reusable path for building compact TSAD models from existing detectors\. Many application domains already have specialized unsupervised detectors, each capturing different abnormality criteria\. AnoMix provides a way to consolidate these signals without requiring anomaly labels, which are often expensive, delayed, or incomplete in real systems\. This can support faster deployment cycles and lower the barrier to applying multi\-detector anomaly detection in domains with limited labeling resources\. As with any anomaly detector, AnoMix can produce false positives and false negatives, and the impact of these errors depends on the deployment domain\. False positives may increase inspection cost or operator fatigue, while false negatives may delay responses to emerging faults\. These risks should be addressed through domain\-specific validation, threshold calibration, human oversight, and continuous monitoring after deployment\. Nevertheless, by improving deployment efficiency while preserving multiple teacher scoring principles, we believe that AnoMix can have a positive impact on industry from an application perspective\. ## Appendix QLimitations and Future Work In this paper, we proposed AnoMix, a new TSAD framework for label\-free multi\-teacher distillation\. Although the experimental results support the proposed methodology, several limitations remain\. First, if the teacher pool is weak on the target domain, noisy teacher score sequences can pass unreliable supervision to the student\. If several teachers share a correlated failure mode, their score gaps may also align on an incorrect pairwise preference, causing CoRank to assign high confidence to an unreliable consensus\. Second, if the training split is too clean or teacher scores are nearly uniform, only a small number of meaningful score gaps may be available, limiting pairwise anomaly\-preference supervision\. Future work could address these issues through automatic teacher\-pool construction, label\-free TSAD model\-selection criteria\[[54](https://arxiv.org/html/2610.29063#bib.bib54)\], diversity\-aware teacher selection, source\-data selection strategies, and synthetic anomaly injection that enriches the training data with stronger pairwise training signals\.
Similar Articles
Detecting the Undetectable: Enhancing Unsupervised time series Anomaly Detection via Active Learning
Proposes a novel framework combining active learning with masked reconstruction and minimax strategies to improve unsupervised time series anomaly detection, achieving 12.39% AUC improvement over baselines across 28 test cases.
Anomalies in Multivariate Time Series Benchmarks Are Mostly Univariate
This paper introduces a diagnostic framework for multivariate time series anomaly detection benchmarks and finds that labeled anomalies are mostly detectable from individual channels, challenging the need for cross-channel modeling. The authors call for more structurally diverse evaluation sets.
Composing What Each Teacher Learned: Multi-Teacher On-Policy Distillation through Teacher-Relative Shifts
论文提出Δ-MOPD,通过转移每个教师的「教师减基础模型」logit位移(而非端点策略)来改进多教师在线策略蒸馏,在组合与路由两种场景下均取得更好效果并缩小训练顺序差距。
Criticality in Dissimilar Decomposition and Undersampling of Random Datasets with Anomalies
The paper examines how AI-generated anomalies affect batch decomposition and undersampling of random datasets for training large language models, demonstrating a phase transition in decomposition size based on anomaly proportion.
BEACON: Bridging Multimodal Semantics and Asynchronous Propagation for Cloud System Anomaly Detection
BEACON 提出一个融合多模态可观测数据(指标、日志、依赖图)的云系统异常检测框架,通过动态多模态聚合器和异步时空传播器,在三个真实数据集上超越现有最优方法。