# Interpretable Anomaly Detection with DIFFI: Depth-based Isolation Forest Feature Importance

arXiv: https://arxiv.org/abs/2007.11117 · HTML: https://mlsanity.com/paper/2007.11117/

## Key facts

- Cited by 12 papers in the map (data through 14 Oct 2026).
- First posted on arXiv 21 Jul 2020.

## Built on by (most cited first, 12 of 12)

- [An Explainable Artificial Intelligence Approach for Unsupervised Fault Detection and Diagnosis in Rotating Machinery](https://mlsanity.com/paper/2102.11848/) (2021)
- [Explainable Predictive Maintenance: A Survey of Current Methods, Challenges and Opportunities](https://mlsanity.com/paper/2401.07871/) (2024)
- [AcME -- Accelerated Model-agnostic Explanations: Fast Whitening of the Machine-Learning Black Box](https://mlsanity.com/paper/2112.12635/) (2021)
- [A Survey on Explainable Artificial Intelligence for Cybersecurity](https://mlsanity.com/paper/2303.12942/) (2023)
- [Why Are You Weird? Infusing Interpretability in Isolation Forest for Anomaly Detection](https://mlsanity.com/paper/2112.06858/) (2021)
- [Transparent Anomaly Detection via Concept-based Explanations](https://mlsanity.com/paper/2310.10702/) (2023)
- [AcME-AD: Accelerated Model Explanations for Anomaly Detection](https://mlsanity.com/paper/2403.01245/) (2024)
- [Extending Decision Predicate Graphs for Comprehensive Explanation of Isolation Forest](https://mlsanity.com/paper/2505.04019/) (2025)
- [Hierarchical Reference Sets for Robust Unsupervised Detection of Scattered and Clustered Outliers](https://mlsanity.com/paper/2603.12847/) (2026)
- [DTOR: Decision Tree Outlier Regressor to explain anomalies](https://mlsanity.com/paper/2403.10903/) (2024)
- [Towards Transparent and Efficient Anomaly Detection in Industrial Processes through ExIFFI](https://mlsanity.com/paper/2405.01158/) (2024)
- [Witnesses Explain Anomalies](https://mlsanity.com/paper/2609.03826/) (2026)

## Abstract (arXiv)

Anomaly Detection is an unsupervised learning task aimed at detecting anomalous behaviours with respect to historical data. In particular, multivariate Anomaly Detection has an important role in many applications thanks to the capability of summarizing the status of a complex system or observed phenomenon with a single indicator (typically called `Anomaly Score') and thanks to the unsupervised nature of the task that does not require human tagging. The Isolation Forest is one of the most commonly adopted algorithms in the field of Anomaly Detection, due to its proven effectiveness and low computational complexity. A major problem affecting Isolation Forest is represented by the lack of interpretability, an effect of the inherent randomness governing the splits performed by the Isolation Trees, the building blocks of the Isolation Forest. In this paper we propose effective, yet computationally inexpensive, methods to define feature importance scores at both global and local level for the Isolation Forest. Moreover, we define a procedure to perform unsupervised feature selection for Anomaly Detection problems based on our interpretability method; such procedure also serves the purpose of tackling the challenging task of feature importance evaluation in unsupervised anomaly detection. We assess the performance on several synthetic and real-world datasets, including comparisons against state-of-the-art interpretability techniques, and make the code publicly available to enhance reproducibility and foster research in the field.
