Abstract:The task of identifying anomalous users on attributed social networks requires the detection of users whose profile attributes and network structure significantly differ from those of the majority of the reference profiles. GNN-based models are well-suited for addressing the challenge of integrating network structure and node attributes into the learning process because they can efficiently incorporate demographic data, activity patterns, and other relevant information. Aggregate operations, such as sum or mean pooling, are utilized by Graph Neural Networks (GNNs) to combine the representations of neighboring nodes within a graph. However, these aggregate operations can cause problems in detecting anomalous nodes. There are two main issues to consider when utilizing aggregate operations in GNNs. Firstly, the presence of anomalous neighboring nodes may affect the representation of normal nodes, leading to false positives. Secondly, anomalous nodes may be overlooked as their representation is flattened during the aggregate operation, leading to false negatives. The proposed approach, AnomEn, is a robust graph neural network developed for anomaly detection. It addresses the challenges of false positives and false negatives using a weighted aggregate mechanism. This mechanism is designed to differentiate between a node's own features and the features of its neighbors by placing greater emphasis on a node's own features and less emphasis on its neighbors' features. The system can preserve the node's original characteristics, whether the node is normal or anomalous. This work proposes not only a robust graph neural network, namely, AnomEn, but also specific anomaly detection structures for nodes and edges. The proposed AnomEn method serves as the encoder in the node and edge anomaly detection architectures and was tested on multiple datasets. Experiments were conducted to validate the effectiveness of the proposed method as a graph neural network encoder. The findings demonstrated the robustness of the proposed method in detecting anomalies. The proposed method outperforms other existing methods in node anomaly detection tasks by 5.63% and edge anomaly detection tasks by 7.87%.

Neuron-Compressed Deep Neural Network and Its Application in Industrial Anomaly Detection

Data anomaly detection for structural health monitoring using a combination network of GANomaly and CNN

Anomaly detection using large-scale multimode industrial data: An integration method of nonstationary kernel and autoencoder

Lightweight and Accurate DNN-based Anomaly Detection at Edge

Deep Anomaly Detection for Time-Series Data in Industrial IoT: A Communication-Efficient On-Device Federated Learning Approach

Deep Learning for Network Anomaly Detection under Data Contamination: Evaluating Robustness and Mitigating Performance Degradation

Two-stream Decoder Feature Normality Estimating Network for Industrial Anomaly Detection

Robust Graph Neural-Network-Based Encoder for Node and Edge Deep Anomaly Detection on Attributed Networks

EasyNet: An Easy Network for 3D Industrial Anomaly Detection

Deep Learning-based Anomaly Detection and Log Analysis for Computer Networks

Dynamics of caspase-3-mediated apoptosis during spinal cord regeneration in the teleost fish, Apteronotus leptorhynchus

Network Anomaly Intrusion Detection Based on Deep Learning Approach

Hybrid Cloud-Edge Collaborative Data Anomaly Detection in Industrial Sensor Networks

Optimal Classification-based Anomaly Detection with Neural Networks: Theory and Practice

Minimal-Configuration Anomaly Detection for IIoT Sensors

Noise-to-Norm Reconstruction for Industrial Anomaly Detection and Localization

A Power Anomaly Detection Architecture Based on DNN

Evaluation of deep unsupervised anomaly detection methods with a data-centric approach for on-line inspection

Real-Time Deep Anomaly Detection Framework for Multivariate Time-Series Data in Industrial IoT

Log-based Anomaly Detection of Enterprise Software: An Empirical Study

Unsupervised Anomaly Detection Based on Deep Autoencoding and Clustering