Type something to search...
Anomaly Detection Agent
Anomaly Detection Agent

Anomaly Detection Agent

Mohamed Ali Msadek

An anomaly detection agent designed to identify uplink interference and abnormal RAN behavior in 5G networks using Long Short-Term Memory (LSTM) autoencoder models. The agent provides real-time and historical anomaly detection, severity attribution, KPI-level explainability, and recommended mitigation actions for autonomous RAN operations.

develop

Detailed Description

This artifact is part of a multi-agent architecture for next-generation autonomous networks. It detects uplink interference and abnormal RAN behavior in 5G networks using multivariate time-series anomaly detection. The agent continuously ingests RAN telemetry through the deployed monitoring xApps. The detection core is based on an LSTM Autoencoder model trained on normal network behavior to learn temporal and cross-KPI correlations. During inference:

  1. KPI sequences are reconstructed by the LSTM Autoencoder
  2. Reconstruction error is computed per time window
  3. An anomaly is triggered when the error exceeds an adaptive threshold
  4. Per-KPI residual analysis identifies the most deviating metrics

The agent further:

  1. Performs severity scoring based on magnitude, persistence, and KPI impact
  2. Generates explainability reports highlighting top contributing KPIs
  3. Maps deviation patterns to likely root causes (e.g., uplink interference)
  4. Recommends mitigation actions

It operates in both real-time mode for streaming monitoring and historical analysis mode for post-mortem investigation. This enables predictive maintenance and proactive fault management in intent-driven autonomous RAN frameworks.

Key Features

  • LSTM Autoencoder-based multivariate anomaly detection
  • Real-time uplink interference detection
  • KPI-level explainability via residual contribution analysis
  • Historical replay and root cause analysis

Use Cases

  • Uplink interference detection in 5G networks
  • Predictive maintenance in Open RAN deployments
  • Autonomous RAN observability within intent-driven architectures
  • Root cause analysis for degraded uplink performance
Share :

External Resources

Lab 4: End-to-End Anomaly Detection with Interference Injection


BubbleRAN open documentation
View Details

Technical Details


Version2026.01
Published01 Jan, 2026
Base
Platform:
BubbleRAN MX-PDK and MX-AI

Author


Mohamed Ali Msadek
Mohamed Ali Msadek

Tags


  • O-RAN
  • Monitor
  • OpenAirInterface

Affiliation


  • BubbleRAN
  • EURECOM

Certified By


  • BubbleRANBubbleRAN

Comments

Sign in to join the discussion

More from Mohamed Ali Msadek

Interference Anomaly Detection Dataset

Interference Anomaly Detection Dataset

Mohamed Ali Msadek

This dataset provides 1-second–granularity time-series measurements collected from a dedicated 5G Standalone (SA) testbed operating on band n41. It includes multi-layer RAN telemetry (MAC, RLC, PDCP) under both nominal conditions and intentionally induced persistent uplink interference, enabling reproducible anomaly detection, cross-layer analysis, and machine learning research.

O-RANMonitorMachine Learning+2
release
Uplink Anomaly Detection LSTM model

Uplink Anomaly Detection LSTM model

Mohamed Ali Msadek

This model is based on a Long Short-Term Memory (LSTM) autoencoder to detect anomalies (e.g., interference or abnormal behavior) in 5G uplink traffic by analyzing time-series KPIs.

O-RANMonitorMachine Learning+1
release

Related Artifacts

Interference Anomaly Detection Dataset

Interference Anomaly Detection Dataset

Mohamed Ali Msadek

This dataset provides 1-second–granularity time-series measurements collected from a dedicated 5G Standalone (SA) testbed operating on band n41. It includes multi-layer RAN telemetry (MAC, RLC, PDCP) under both nominal conditions and intentionally induced persistent uplink interference, enabling reproducible anomaly detection, cross-layer analysis, and machine learning research.

O-RANMonitorMachine Learning+2
release
Uplink Anomaly Detection LSTM model

Uplink Anomaly Detection LSTM model

Mohamed Ali Msadek

This model is based on a Long Short-Term Memory (LSTM) autoencoder to detect anomalies (e.g., interference or abnormal behavior) in 5G uplink traffic by analyzing time-series KPIs.

O-RANMonitorMachine Learning+1
release