Abstract:Graph Anomaly Detection (GAD) is a technique used to identify abnormal nodes within graphs, finding applications in network security, fraud detection, social media spam detection, and various other domains. A common method for GAD is Graph Auto-Encoders (GAEs), which encode graph data into node representations and identify anomalies by assessing the reconstruction quality of the graphs based on these representations. However, existing GAE models are primarily optimized for direct link reconstruction, resulting in nodes connected in the graph being clustered in the latent space. As a result, they excel at detecting cluster-type structural anomalies but struggle with more complex structural anomalies that do not conform to clusters. To address this limitation, we propose a novel solution called GAD-NR, a new variant of GAE that incorporates neighborhood reconstruction for graph anomaly detection. GAD-NR aims to reconstruct the entire neighborhood of a node, encompassing the local structure, self-attributes, and neighbor attributes, based on the corresponding node representation. By comparing the neighborhood reconstruction loss between anomalous nodes and normal nodes, GAD-NR can effectively detect any anomalies. Extensive experimentation conducted on six real-world datasets validates the effectiveness of GAD-NR, showcasing significant improvements (by up to 30% in AUC) over state-of-the-art competitors. The source code for GAD-NR is openly available. Importantly, the comparative analysis reveals that the existing methods perform well only in detecting one or two types of anomalies out of the three types studied. In contrast, GAD-NR excels at detecting all three types of anomalies across the datasets, demonstrating its comprehensive anomaly detection capabilities.

A Network Anomaly Detection Algorithm Based on Natural Neighborhood Graph.

A Universal Adaptive Algorithm for Graph Anomaly Detection

Network Anomaly Detection Algorithm Based on Lindeberg-Feller Central Limit Theorem

Network Anomaly Detection Based on TCM-KNN Algorithm

Anomaly Detection in Wireless Sensor Networks Based on KNN

A Detection Algorithm to Anomaly Network Traffic Based on Spectral Kurtosis Analysis

A Network Anomaly Detection Method Based on Transduction Scheme

GCN-based Graph Anomaly Detection

Network Anomaly Detection Based on Frequent Sub-Graph Mining Approach and Association Analysis

GAD-NR: Graph Anomaly Detection via Neighborhood Reconstruction

An Abnormal Network Traffic Detection Algorithm Based on Big Data Analysis

A Novel Network Intrusion Detection Algorithm Based on Density Estimation

A fast anomaly network traffic detection method based on the constrained k-nearest neighbor

Subtle Anomaly Detection in Dynamic Networks Using Graph Spectra

A Novel Data Mining Method for Network Anomaly Detection Based on Transductive Scheme

A Semi-Supervised Intrusion Detection Algorithm Based on Natural Neighbor

A Novel Backbone Network Anomaly Detector Via Clustering In Sketch Space

Network Anomaly Detection Based on DSOM and ACO Clustering

A Dynamic Network Anomaly Detection Method Based On Trend Analysis

Anomaly Detection for Remote Maintenance Control System of Natural Gas Pipeline Based on Nearest Neighbor Clustering

Network Anomaly Detection and Localization