Abstract:We study network anomaly detection problem with subgraph search and vertex classification techniques in Chung-Lu networks, where small anomalous networks are embedded in background networks. The general detectors traditionally utilize the spectral characteristics of whole networks to decide whether the anomalous networks exist or not. Moreover, many algorithms model the background networks with special random graphs, such as Erdős–Rényi random graphs. However, these methods may not achieve good detection performance because the spectral information of anomalous networks extracting from the relational data of the whole networks is subtle. Furthermore, the assumptions of the models limit the applications of the methods. In order to improve the detection capability of algorithms and relax the restriction of the background networks models, we develop two preprocessing approaches, referred to as subgraph search and vertex classification, and propose two detection algorithms, which can be applicable to the generalized network model (Chung-Lu random graph). By leveraging statistic features of priori data, the subgraph search method can obtain local network nodes that are more anomalous than the remainder. Moreover, the vertex classification is used to further distinguish the anomalous nodes from the local ones. And then, by using the relational data corresponding to the local nodes, the detection statistics are constructed to detect the anomalous network. Additionally, based on concentration of measure theory, the probability bounds of performance analysis are derived for the presented algorithms. Simulation examples are provided to illustrate that the proposed detectors can achieve better detection performance than the existing algorithms.

Subtle Anomaly Detection in Dynamic Networks Using Graph Spectra

A Spectral Approach to Detecting Subtle Anomalies in Graphs

Fine-Grained Anomaly Detection on Dynamic Graphs Via Attention Alignment

Incremental and Parallel Algorithm for Anomaly Detection in Dynamic Graphs

Anomaly Detection of Network Streams Via Dense Subgraph Discovery

Community detection and anomaly prediction in dynamic networks

An Unsupervised Learning-Based Multivariate Anomaly Detection Method for Dynamic Attention Graphs

An Effective Method for Computer Network Anomaly Detection

SubAnom: Efficient Subgraph Anomaly Detection Framework over Dynamic Graphs

An Unsupervised Ensemble Framework for Node Anomaly Behavior Detection in Social Network.

A Dynamic Network Anomaly Detection Method Based On Trend Analysis

TAAD: Time-varying adversarial anomaly detection in dynamic graphs

A Detection Algorithm to Anomaly Network Traffic Based on Spectral Kurtosis Analysis

Fast and Accurate Anomaly Detection in Dynamic Graphs with a Two-Pronged Approach

A Generalizable Anomaly Detection Method in Dynamic Graphs

Learning-Based Link Anomaly Detection in Continuous-Time Dynamic Graphs

Anomaly Detection with Subgraph Search and Vertex Classification Preprocessing in Chung-Lu Random Networks

Practical Cyber Attack Detection With Continuous Temporal Graph in Dynamic Network System

Multivariate Time Series Anomaly Detection via Dynamic Graph Forecasting

An Efficient Approach to Event Detection and Forecasting in Dynamic Multivariate Social Media Networks.

GADY: Unsupervised Anomaly Detection on Dynamic Graphs