arXiv:2608.10699cs.LGcs.AI2026-08

提出解耦拓扑与文本原型的图异常检测模型,提升跨域泛化能力。

ProTAGAD: A Foundation Model for TAG Anomaly Detection with Decoupled Topological and Textual Prototypes

论文配图:ProTAGAD: A Foundation Model for TAG Anomaly Detection with Decoupled Topological and Textual Prototypes
图 1 · 摘自论文原文
  • 分离建模拓扑正常性与语义一致性,避免模态混淆
  • 在14个数据集上实现跨域最优性能,准确率显著领先
  • 适合需要高鲁棒性的安全、社交网络等场景应用

文本属性图(TAG)因其丰富的文本内容与拓扑结构,已成为大语言模型安全、社交网络监管和网络威胁识别等真实世界异常检测的通用基础。与依赖结构异常的传统图异常检测不同,TAG异常检测需联合利用拓扑模式与细粒度文本语义来捕捉复杂异常行为。现有基于GNN的检测器采用整体消息传递机制,在传播过程中不分彼此融合结构邻近性与文本语义,导致深层模态耦合。这种耦合会放大噪声,模糊异常信号边界,引发‘模糊异常边界’(BAB)问题,使正常与异常难以区分。该问题在需要强跨域泛化的图基础模型中尤为突出。为此,我们提出一种新型基础模型ProTAGAD,通过解耦的拓扑与文本原型库,独立建模结构正常性与语义一致性,有效隔离被耦合聚合稀释的异常线索。在14个多样化基准数据集上的大量实验表明,该方法在跨域设置下持续达到最先进性能。消融实验证实了传统耦合方法普遍存在BAB问题,且所提解耦原型设计能有效缓解此挑战。

原文摘要 · Abstract (English)

Text-Attributed Graphs (TAGs), endowed with abundant textual content along with topological structures, have emerged as a versatile backbone for real-world anomaly detection spanning large language model security, social network moderation, and cyber threat identification. Unlike conventional Graph Anomaly Detection (GAD), which relies primarily on structural irregularities, TAG anomaly detection must jointly leverage both topological patterns and fine-grained textual semantics to capture nuanced anomalous behaviors. The current GNN-based anomaly detectors adopt holistic message-passing schemes that indiscriminately fuse structural proximity and textual semantics during propagation, leading to deep cross-modality coupling. This entanglement acts as a noise amplifier, obscuring subtle anomalous signals and directly giving rise to the Blurred-Anomaly-Boundary (BAB) issue by rendering normal-anomalous decision boundaries poorly separable. This challenge is further amplified for graph foundation models that require robust cross-domain generalization. To bridge this gap, we introduce a novel foundation model for TAG anomaly detection featuring decoupled topological and textual prototypes. Our framework constructs dual prototype banks to independently model structural normality and semantic consistency, effectively isolating anomaly cues that are otherwise diluted during coupled aggregation. Extensive experiments across 14 diverse benchmark datasets demonstrate that our method consistently achieves state-of-the-art performance in cross-domain settings. Notably, the ablation studies further corroborate the prevalence of the BAB issue in conventional coupled TAG anomaly detectors, and show that our decoupled prototype design effectively mitigates this challenge.

图神经网络异常检测多模态学习基础模型

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。