在线适应动态图异常检测,兼顾通用与领域特异性模式。
Online Test-Time Adaptation for Generalizable Dynamic Graph Anomaly Detection

- 构建动态原型记忆库,实时更新正常与异常模式。
- 在10个真实数据集上达到当前最优性能,尤其在流式数据中表现稳定。
- 适合需要持续部署的在线异常检测场景,如金融风控、网络监控。
可泛化的动态图异常检测(DGAD)使预训练模型能在无需重训的情况下识别未见目标域中的异常。然而现有方法常因两点缺陷失效:一是依赖无域特征,忽略随时间演化的域特定模式;二是假设可访问完整目标域数据,而实际中目标数据以无标签块形式逐批到达。为此,本文提出面向通用DGAD的在线测试时自适应框架OTTA-DGAD。该方法从时序自图中提取动态原型(即正常与异常模式的演化表征),存入记忆缓冲区。缓冲区既保留预训练源域间的通用模式,又融入目标域新出现的模式。异常评分器将新到来的边表示与原型比对,识别通用及域特异性异常。自适应过程中,基于置信度筛选可靠伪标签,更新记忆库,并利用前序块保留的相关表征增强当前块,缓解数据分批带来的信息损失。在严格测试-适应设置下,10个来自不同领域的实证数据集实验表明,OTTA-DGAD性能达到当前最优水平。
原文摘要 · Abstract (English)
Generalizable dynamic graph anomaly detection (DGAD) enables pretrained detectors to identify anomalies in unseen target domains without costly retraining. However, existing methods often fail for two reasons. First, they mainly rely on domain-agnostic patterns and miss domain-specific patterns that keep evolving. Second, they assume access to the full target domain data, whereas in more practical online test-time adaptation settings, target data arrive sequentially in unlabeled chunks. To address these limitations, we formulate online test-time adaptation for generalizable DGAD and propose OTTA-DGAD. OTTA-DGAD first extracts dynamic prototypes, i.e., evolving representations of normal and anomalous patterns, from temporal ego-graphs and stores them in a memory buffer. The buffer selectively retains general patterns shared across the source domains used for pretraining while incorporating new patterns from the target domain. An anomaly scorer then compares incoming edge representations against these prototypes to identify both general and domain-specific anomalies. During adaptation, OTTA-DGAD updates the memory buffer using reliable pseudo-labels identified through confidence-based detection. It further enriches each target chunk with relevant representations retained from previous chunks, compensating for information loss resulting from the sequential arrival of data. Extensive experiments under strict test-then-adapt OTTA settings demonstrate state-of-the-art performance on ten real-world datasets from diverse domains.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。