用少量标注异常数据,让动态图检测更准且泛化更强。
Learning Discriminative and Generalizable Anomaly Detector for Dynamic Graph with Limited Supervision
- 从正常数据中学习判别边界,避免过拟合标注异常。
- 在多种设置下显著优于现有方法,提升检测准确率。
- 适合标注稀缺的动态图异常检测场景。
动态图异常检测在诸多实际应用中至关重要,但受限于标注异常数据的稀缺性。现有方法多为无监督或半监督:无监督方法虽无需标注异常,但边界模糊;半监督方法易对有限标注异常过拟合,泛化能力差。为此,本文提出一种新范式:在仅当有少量标注异常时利用它们,同时从正常/未标注数据中学习判别边界,兼顾泛化性。我们设计了三项核心组件:(i) 残差表示编码,捕捉当前交互与历史上下文的偏差,提供异常相关信号;(ii) 约束损失,将正常表示限制在两个同心超球体之间的区间内,确保尺度一致并保持异常可分;(iii) 双边界优化策略,通过归一化流建模对数似然分布,学习鲁棒判别边界。大量实验表明,该框架在多种评估设置下均表现优异。
原文摘要 · Abstract (English)
Dynamic graph anomaly detection is critical for many real-world applications but remains challenging due to the scarcity of labeled anomalies. Existing methods are either unsupervised or semi-supervised: unsupervised methods avoid the need for labeled anomalies but often produce ambiguous boundary, whereas semi-supervised methods can overfit to the limited labeled anomalies and generalize poorly to unseen anomalies. To address this gap, we consider a largely underexplored problem: learning a discriminative boundary from normal/unlabeled data, while leveraging limited labeled anomalies \textbf{when available} without sacrificing generalization to unseen anomalies. In this paper, we propose an effective, generalizable, and model-agnostic framework with three main components: (i) residual representation encoding that capture deviations between current interactions and their historical context, providing anomaly-relevant signals; (ii) a restriction loss that constrain the normal representations within an interval bounded by two co-centered hyperspheres, ensuring consistent scales while keeping anomalies separable; (iii) a bi-boundary optimization strategy that learns a discriminative and robust boundary using the log-likelihood distribution modeled by a normalizing flow. Extensive experiments demonstrate the superiority of our framework across diverse evaluation settings.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。