不训练也能跨域检测图异常,靠邻居多样性识别异常节点。
NeighborDiv: Training-free Zero-shot Generalist Graph Anomaly Detection via Neighbor Diversity
- 用邻居间特征相似性的方差衡量局部结构分散度,替代传统一致性判断。
- 在标准评测下平均AUC提升10.25%,平均AP提升17.78%,性能领先。
- 无需训练、无数据依赖,适合快速部署到新场景的通用图异常检测。
图异常检测(GAD)正向通用型GAD(GGAD)演进,以实现跨域‘一法通’检测。然而现有方法多依赖邻居一致性原则,陷入‘节点-邻居一致性范式’,存在训练流程复杂、数据依赖强、计算开销大及跨域泛化不稳定等问题。为此,本文提出NeighborDiv,一种基于邻居多样性的免训练通用图异常检测框架。突破主流范式,转向‘邻居-邻居多样性范式’,发现节点邻居集内部结构分散度是独立且强判别的异常信号。通过邻居间特征相似性的方差量化邻居多样性,捕捉节点局部环境组织方式,与传统一致性框架解耦。在两种标准GGAD评估范式下,NeighborDiv表现优异:在单域独立训练(SDIT)中,平均AUC相对次优基线提升10.25%,平均AP提升17.78%;在统一多域训练(UMDT)中,平均AUC和AP分别提升6.89%和9.58%。尤为关键的是,其在所有数据集上均无性能波动,彻底消除训练集依赖,构建出轻量高效、高度实用的通用图异常检测方案。
原文摘要 · Abstract (English)
Graph Anomaly Detection (GAD) is increasingly shifting to Generalist GAD (GGAD) for cross-domain "one-for-all" detection, but existing GGAD methods predominantly rely on the neighbor consistency principle, falling into the \textbf{Node-to-Neighbor Consistency Paradigm} for anomaly quantification. These methods suffer from complex training pipelines, heavy training data dependency, high computational costs, and unstable cross-domain generalization. To address these limitations, we propose NeighborDiv, a training-free generalist graph anomaly detection framework based on neighbor diversity. Departing from the dominant Node-to-Neighbor Consistency Paradigm, we shift the focus to the \textbf{Neighbor-to-Neighbor Diversity Paradigm}, and uncover that the internal structural dispersion of a node's neighbor set is a powerful, independently discriminative anomaly signal. We quantify neighbor diversity via the variance of inter-neighbor feature similarities, which captures how a node organizes its local graph environment, and operates independently of conventional node-to-neighbor consistency frameworks. Extensive experiments under two standard GGAD evaluation paradigms show NeighborDiv achieves state-of-the-art performance, with relative gains of 10.25% in average AUC and 17.78% in average AP over the second-best baseline under Single-Domain Independent Training (SDIT), and 6.89%/9.58% in AUC/AP under Unified Multi-Domain Training (UMDT), respectively. Notably, NeighborDiv yields zero performance volatility across all datasets, eliminating training-set dependency and establishing a lightweight and highly practical GGAD framework.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。