用大模型生成真实文本异常,提升图文图谱检测效果。
LLM-Powered Text-Attributed Graph Anomaly Detection via Retrieval-Augmented Reasoning
- 构建基于大模型的图文图谱异常数据集,生成语义合理但上下文异常的节点文本。
- 发现大模型擅长检测上下文异常,而图神经网络更擅长结构异常。
- 提出检索增强生成框架,无需人工设计提示词即可实现高精度零样本检测。
属性图上的异常检测在欺诈识别、入侵监控和虚假信息分析等场景中至关重要。然而,以自然语言表达节点信息的文本属性图(TAGs)仍缺乏系统研究,主要受限于缺少标准化基准数据集。本文提出TAG-AD,一个面向文本属性图异常节点检测的综合性基准。该基准利用大语言模型(LLMs)在原始文本空间直接生成真实的异常节点文本,使异常具有语义连贯性但上下文不一致,更贴近真实世界中的异常特征。此外,TAG-AD还包含多种异常类型,支持对图异常检测(GAD)方法的全面、可复现评估。基于此数据集,我们评测了现有无监督图神经网络(GNN)方法及零样本大模型在GAD任务上的表现。为此,我们提出一种基于检索增强生成(RAG)的大模型零样本异常检测框架,通过构建全局异常知识库并提炼为可复用分析框架,降低对脆弱的手工提示词依赖。实验结果表明:大模型在检测上下文异常方面表现优异,而图神经网络在结构异常检测上仍具优势。同时,RAG辅助提示策略达到与人工设计提示相当的性能,且免除了手动调参,凸显其实际价值。
原文摘要 · Abstract (English)
Anomaly detection on attributed graphs plays an essential role in applications such as fraud detection, intrusion monitoring, and misinformation analysis. However, text-attributed graphs (TAGs), in which node information is expressed in natural language, remain underexplored, largely due to the absence of standardized benchmark datasets. In this work, we introduce TAG-AD, a comprehensive benchmark for anomaly node detection on TAGs. TAG-AD leverages large language models (LLMs) to generate realistic anomalous node texts directly in the raw text space, producing anomalies that are semantically coherent yet contextually inconsistent and thus more reflective of real-world irregularities. In addition, TAG-AD incorporates multiple other anomaly types, enabling thorough and reproducible evaluation of graph anomaly detection (GAD) methods. With these datasets, we further benchmark existing unsupervised GNN-based GAD methods as well as zero-shot LLMs for GAD. As part of our zero-shot detection setup, we propose a retrieval-augmented generation (RAG)-assisted, LLM-based zero-shot anomaly detection framework. The framework mitigates reliance on brittle, hand-crafted prompts by constructing a global anomaly knowledge base and distilling it into reusable analysis frameworks. Our experimental results reveal a clear division of strengths: LLMs are particularly effective at detecting contextual anomalies, whereas GNN-based methods remain superior for structural anomaly detection. Moreover, RAG-assisted prompting achieves performance comparable to human-designed prompts while eliminating manual prompt engineering, underscoring the practical value of our RAG-assisted zero-shot LLM anomaly detection framework.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。