Abstract:Graph structure patterns are widely used to model different area data recently. How to detect anomalous graph information on these graph data has become a popular research problem. The objective of this research is centered on the particular issue that how to detect abnormal graphs within a graph set. The previous works have observed that abnormal graphs mainly show node-level and graph-level anomalies, but these methods equally treat two anomaly forms above in the evaluation of abnormal graphs, which is contrary to the fact that different types of abnormal graph data have different degrees in terms of node-level and graph-level anomalies. Furthermore, abnormal graphs that have subtle differences from normal graphs are easily escaped detection by the existing methods. Thus, we propose a multi-representations space separation based graph-level anomaly-aware detection framework in this paper. To consider the different importance of node-level and graph-level anomalies, we design an anomaly-aware module to learn the specific weight between them in the abnormal graph evaluation process. In addition, we learn strictly separate normal and abnormal graph representation spaces by four types of weighted graph representations against each other including anchor normal graphs, anchor abnormal graphs, training normal graphs, and training abnormal graphs. Based on the distance error between the graph representations of the test graph and both normal and abnormal graph representation spaces, we can accurately determine whether the test graph is anomalous. Our approach has been extensively evaluated against baseline methods using ten public graph datasets, and the results demonstrate its effectiveness.

Anomaly detection based on grammar

APPLICATION OF YACC IN NETWORK INTRUSION DETECTION

Packet Payload Based Anomalous Network Intrusion Detection

Research on System Log Anomaly Detection Combining Two-way Slice GRU and GA-Attention Mechanism

An Intrusion Detection System Based On System Call

Anomaly Detection Algorithm Based on Electric Equipment

Worm Intrusion Alarm Modeling Based on Network Traffic Character

Anomaly Detection Based on System Call Classification

A Markov Model of System Calls Sequence and Its Application in Anomaly Detection

Anomaly Detection for Automotive Diagnostic Applications Based on N-Grams

Natural Language Processing-based Model for Log Anomaly Detection

Profiling program behavior for anomaly intrusion detection based on the transition and frequency property of computer audit data

A Rough Set Theory Based Method for Anomaly Intrusion Detection in Computer Network Systems

Detecting zero-day attacks using context-aware anomaly detection at the application-layer

An Anomaly Detection Approach of Part-of-Speech Log Sequence Via Population Based Training

Anomaly based multi-stage attack detection method

HitAnomaly: Hierarchical Transformers for Anomaly Detection in System Log

Anomaly-Based Web Attack Detection

Anomaly-Based Web Attack Detection: A Deep Learning Approach

Multi-representations Space Separation based Graph-level Anomaly-aware Detection

An Intelligent Framework for Log Anomaly Detection Based on Log Template Extraction