arXiv:2608.12441cs.LGcs.AI2026-08

为动态图异常检测模型添加可解释性,让每条预警都有原因可查。

Dual Spatial-Temporal Attribution: Architecture-Aligned Post-Hoc Explainability for Recurrent Graph Anomaly Detection

  • 通过空间-时间双重归因机制,分别解析当前图结构、短期上下文和长期历史影响。
  • 在UCI Message数据集上保持原有AUC 0.8705,且零成本实现解释。
  • 能发现历史异常信号,适合需要审计的金融、安全等高可信场景。

动态图中的深度学习异常检测模型虽精度高,但缺乏可解释性:当某条边被标记为异常时,用户只得到一个分数而无原因。这在需协同与监管的信息系统中难以接受。针对基础框架AddGraph(GCN+GRU),我们提出后处理可解释框架X-AddGraph,基于双空间-时间归因(DSTA)机制,其三部分分别对应AddGraph的三个模块:基于梯度的当前邻接矩阵重要性归因(空间)、直接读取推理中已计算的上下文注意力权重(短期时间,零额外开销)、通过循环隐藏状态回溯梯度(长期时间)。由于检测器冻结,性能完全保留(ΔAUC = 0,实测至小数点后十位)。在UCI Message基准上,训练后的AddGraph基线平均单快照AUC达0.8705,超过原论文结果;X-AddGraph完全复现所有评分并新增解释。在四类边样本(高置信真阳性、低置信真阳性、假阳性、随机采样)上,长期归因显示历史快照的反事实信号显著高于随机选择(0.127 vs. 0.074),这是仅靠空间归因无法实现的能力。代码已开源以保障可复现性。

原文摘要 · Abstract (English)

Deep learning detectors for anomalies in dynamic graphs have reached strong accuracy, yet they remain opaque: when an edge is flagged, the analyst receives a score but no reason. This opacity is untenable in the cooperative, regulated information systems where such detectors are deployed, where automated decisions must be auditable and trustworthy. We address this gap for AddGraph, the foundational GCN+GRU framework for edge-level anomaly detection in dynamic graphs, which to our knowledge has never been equipped with any form of explainability. We present a strictly post-hoc explainability framework, X-AddGraph, built on a Dual Spatial-Temporal Attribution (DSTA) mechanism whose three components are each aligned with one of AddGraph's architectural modules: a gradient-based relevance attribution over the current adjacency structure (spatial), a direct reading of the contextual attention weights already computed during inference (short-term temporal, at zero additional cost), and a gradient rollback through the recurrent hidden states (long-term temporal). Because the detector is frozen, detection performance is preserved exactly (Delta AUC = 0, verified empirically to ten decimal places). On the UCI Message benchmark, our trained AddGraph baseline reaches an average per-snapshot AUC of 0.8705, exceeding the originally published result; X-AddGraph reproduces every score identically while adding explanations where none existed. Evaluated across four edge populations - confident true positives, low-confidence true positives, false positives, and random samples - the long-term attribution identifies historical snapshots carrying significantly more counterfactual signal than random selection (0.127 vs. 0.074), a capability that no spatially-blind explainer can provide. We release our implementation for full reproducibility.

图神经网络可解释性异常检测动态图

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。