用图注意力模型实现大规模移动网络无监督异常检测,自动识别异常且误报少。
Scalable Context-Aware Graph Attention for Unsupervised Anomaly Detection in Large-Scale Mobile Networks

- 基于时空图注意力与上下文感知机制,统一建模多类网络节点
- 在真实运营商数据上实现93%事件定位准确率,误报率降低40%
- 无需标签即可部署,适合运维人员日常监控使用
移动网络运营商需监控数千个异构网络单元的高维性能指标时间序列。由于事件标注成本高,监督方法不实用,亟需应对上下文变化和非平稳性的无监督异常检测方法。本文提出C-MTAD-GAT(上下文感知多变量时间序列异常检测图注意力模型),一个可跨大量网络单元部署的统一模型。该模型结合时间与特征图注意力,采用轻量级静态和动态上下文条件,以及双头解码器实现重建与多步预测。生成每个元素、每项指标的异常分数,通过无监督阈值(基于验证残差校准)转化为告警。在与DC-VAE一同发布的TELCO数据集上,相比基线图注意力与变分自编码器方法,本模型提升事件级关联度与点级F1值,同时减少告警数量。随后在某运营商的真实国家规模无线接入网与演进分组核心控制面计数器数据上部署,反馈显示告警可操作,支持日常监控,证明了其跨领域可扩展性,无需依赖标注事件。
原文摘要 · Abstract (English)
Mobile network operators must monitor thousands of heterogeneous network elements across the radio access network and the packet core, each exposing high-dimensional KPI time series. The scale and cost of incident labelling make supervised approaches impractical, motivating unsupervised anomaly detection robust to context shifts and nonstationarity. We propose \textbf{C-MTAD-GAT} (\emph{Context-aware Multivariate Time-series Anomaly Detection with Graph Attention}), an anomaly detection framework designed to operate as a single shared model across large populations of network elements. The model combines temporal and feature-wise graph attention with lightweight static and dynamic context conditioning and a dual-head decoder for reconstruction and multi-step forecasting. It produces per-element, per-feature anomaly scores, converted to alerts via fully unsupervised thresholds calibrated from validation residuals. On the TELCO dataset released with DC-VAE \cite{garcia2023onemodel}, C-MTAD-GAT improves event-level affiliation and pointwise F1 while generating fewer alarms than prior graph-attention and VAE-based baselines. We then apply the same system to nation-scale radio access and evolved packet core control-plane counter data from a mobile network operator, where it is deployed. Operator feedback indicates the alerts are actionable and support daily monitoring, showing scalability across domains without relying on labelled incidents.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。