Why classes aren't enough
Picture a machine that breaks down once a year. With one window every two seconds, in a year you record almost sixteen million normal windows and maybe a few dozen windows of the fault. No classifier can learn from a ratio like that, and next year's fault will be different anyway.
That's why anomalies are handled the other way around. You describe one thing well, normal, which has plenty of examples. Everything that doesn't look like it becomes suspicious, even a fault nobody had ever seen.
- 15.8 Mtwo-second windows in a year
- 1fault a year