用图神经网络和时间建模统一检测微服务异常并追踪根因。
Graph Neural AI with Temporal Dynamics for Comprehensive Anomaly Detection in Microservices
- 构建服务调用链的有向图,融合节点边特征进行结构建模。
- 引入门控循环单元捕捉调用链时序变化,提升异常识别能力。
- 支持节点与路径级异常评分,适合复杂分布式系统运维使用。
本研究针对微服务架构中的异常检测与根因追溯问题,提出一种融合图神经网络与时间建模的统一框架。将微服务调用链抽象为有向图,利用节点与边的多维特征构建服务拓扑表示,通过图卷积聚合节点特征并建模服务依赖关系,捕捉复杂的结构关联。在此基础上,引入门控循环单元(GRU)对调用链的时间演化进行建模,并采用多层堆叠与拼接操作联合获取结构与时序表示,增强异常模式识别能力。进一步定义节点级与路径级异常评分函数,实现从局部异常检测到全局调用链追溯的统一建模,可定位异常服务节点并重构潜在异常传播路径。通过多维度敏感性实验(包括超参数、环境扰动、数据分布等)评估框架性能,结果表明其在AUC、ACC、Recall、F1-Score等关键指标上优于基线方法,在动态拓扑与复杂环境下仍保持高精度与稳定性。该研究不仅为微服务异常检测提供新路径,也为分布式系统智能运维奠定方法基础。
原文摘要 · Abstract (English)
This study addresses the problem of anomaly detection and root cause tracing in microservice architectures and proposes a unified framework that combines graph neural networks with temporal modeling. The microservice call chain is abstracted as a directed graph, where multidimensional features of nodes and edges are used to construct a service topology representation, and graph convolution is applied to aggregate features across nodes and model dependencies, capturing complex structural relationships among services. On this basis, gated recurrent units are introduced to model the temporal evolution of call chains, and multi-layer stacking and concatenation operations are used to jointly obtain structural and temporal representations, improving the ability to identify anomaly patterns. Furthermore, anomaly scoring functions at both the node and path levels are defined to achieve unified modeling from local anomaly detection to global call chain tracing, which enables the identification of abnormal service nodes and the reconstruction of potential anomaly propagation paths. Sensitivity experiments are then designed from multiple dimensions, including hyperparameters, environmental disturbances, and data distribution, to evaluate the framework, and results show that it outperforms baseline methods in key metrics such as AUC, ACC, Recall, and F1-Score, maintaining high accuracy and stability under dynamic topologies and complex environments. This research not only provides a new technical path for anomaly detection in microservices but also lays a methodological foundation for intelligent operations in distributed systems.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。