用图注意力网络+LSTM检测微服务异常,还能解释问题出在哪。
GAL-MAD: Towards Explainable Anomaly Detection in Microservice Applications Using Graph Attention Networks
- 构建图结构捕捉服务间依赖,结合LSTM处理时间序列数据。
- 在10类异常上准确率和召回率均优于现有模型。
- 通过SHAP值定位异常服务,适合运维人员排查故障。
微服务架构虽提升系统可扩展性,但其分布式特性使异常检测变得复杂。现有方法多依赖日志与系统轨迹,难以应对高维、强关联的数据。本文基于RobotShop应用构建了包含十类异常的RS-Anomic数据集,涵盖多种性能指标与响应时间。提出GAL-MAD模型,融合图注意力网络与长短期记忆网络,有效捕捉微服务间的时空依赖关系。利用SHAP值进行异常根因定位,提升可解释性。实验表明,GAL-MAD在不同异常率下均优于主流模型,具备更高准确率与召回率,为系统管理员提供可操作的诊断依据。
原文摘要 · Abstract (English)
The transition to microservices has revolutionized software architectures, offering enhanced scalability and modularity. However, the distributed and dynamic nature of microservices introduces complexities in ensuring system reliability, making anomaly detection crucial for maintaining performance and functionality. Anomalies stemming from network and performance issues must be swiftly identified and addressed. Existing anomaly detection techniques often rely on statistical models or machine learning methods that struggle with the high-dimensional, interdependent data inherent in microservice applications. Current techniques and available datasets predominantly focus on system traces and logs, limiting their ability to support advanced detection models. This paper addresses these gaps by introducing the RS-Anomic dataset generated using the open-source RobotShop microservice application. The dataset captures multivariate performance metrics and response times under normal and anomalous conditions, encompassing ten types of anomalies. We propose a novel anomaly detection model called Graph Attention and LSTM-based Microservice Anomaly Detection (GAL-MAD), leveraging Graph Attention and Long Short-Term Memory architectures to capture spatial and temporal dependencies in microservices. We utilize SHAP values to localize anomalous services and identify root causes to enhance explainability. Experimental results demonstrate that GAL-MAD outperforms state-of-the-art models on the RS-Anomic dataset, achieving higher accuracy and recall across varying anomaly rates. The explanations provide actionable insights into service anomalies, which benefits system administrators.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。