arXiv:2608.15559cs.LGcs.AI2026-08

为动态图异常检测器添加精准解释层,让决策可追溯且无性能损失。

Amortised Post-Hoc Explanation with Exact Preservation for Dynamic Graph Anomaly Detectors

  • 通过双重归因机制,解析异常边的结构与时间信号来源。
  • 解释成本仅0.66毫秒/边,检测精度零损耗(ΔAUC=0.0000)。
  • 适用于金融风控、入侵检测等需可解释决策的场景。

动态图中的异常检测在金融欺诈分析、入侵检测和平台完整性保障中至关重要,自动化决策需具备人类可理解的解释。现有最强模型StrGNN虽表现优异,但无解释能力:当某条边被标记为异常时,仅输出一个分数,缺乏归因向量,导致解释指标无法定义。本文提出X-StrGNN,一种后处理解释层,可封装已训练冻结的StrGNN,对每条异常边生成双重归因:结构归因识别影响决策的上下文交互关系,时间归因定位携带信号的历史快照。两种归因均为乘性掩码,与原模型一致,实现精确透传,检测结果保持机器精度(ΔAUC=0.0000,ΔAP=0.0000,ΔP@100=0.0000)。单边解释耗时0.66毫秒,可高效完成全警报列表解释。首次在统一协议、预算与三组随机种子下,对比梯度归因、实例级掩码优化与摊销参数化策略。X-StrGNN在稳定性上达0.913,代价仅为实例优化的1/268;其时间归因得分1.601,显著优于随机基线0.973,而最昂贵的实例优化反而低于该基线。代码、协议及各种子测量数据均已开源。

原文摘要 · Abstract (English)

Anomaly detection in dynamic graphs underpins financial fraud analysis, intrusion detection, and platform integrity, where automated decisions require human-interpretable justifications. StrGNN, the strongest performer in recent benchmarks, produces no explanation: when an edge is flagged, the analyst receives only a score. Explanation metrics are undefined for StrGNN because no attribution vector exists. This paper closes that gap. We present X-StrGNN, a post-hoc explanation layer that wraps a trained, frozen StrGNN and emits, for every flagged edge, dual attributions: a structural attribution identifying which contextual interactions in the enclosing subgraph drove the decision, and a temporal attribution identifying which historical snapshot carried the signal. Both attributions are multiplicative masks identically one in the unexplained pass, so the layer is an exact pass-through: detection is preserved to machine precision, verified rather than asserted (Delta AUC = 0.0000, Delta AP = 0.0000, Delta P@100 = 0.0000). Attribution costs 0.66 ms per edge, making explanation of an entire alarm list feasible. We conduct the first controlled design study of attribution strategies for this architecture, comparing gradient attribution, per-instance mask optimisation, and amortised parameterisation under one protocol, one budget, and three seeds. X-StrGNN attains the highest stability (0.913) at 268x lower cost than per-instance optimisation, and its temporal attribution (1.601 against a measured random floor of 0.973) is separably better than its ablated control, while per-instance optimisation - the most expensive strategy - falls below that floor. Code, protocol, and per-seed measurements are released.

图神经网络异常检测可解释性动态图

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。