Abstract:Microservice architecture has sprung up over recent years for managing enterprise applications, due to its ability to independently deploy and scale services. Despite its benefits, ensuring the reliability and safety of a microservice system remains highly challenging. Existing anomaly detection algorithms based on a single data modality (i.e., metrics, logs, or traces) fail to fully account for the complex correlations and interactions between different modalities, leading to false negatives and false alarms, whereas incorporating more data modalities can offer opportunities for further performance gain. As a fresh attempt, we propose in this paper a semi-supervised graph-based anomaly detection method, MSTGAD, which seamlessly integrates all available data modalities via attentive multi-modal learning. First, we extract and normalize features from the three modalities, and further integrate them using a graph, namely MST (microservice system twin) graph, where each node represents a service instance and the edge indicates the scheduling relationship between different service instances. The MST graph provides a virtual representation of the status and scheduling relationships among service instances of a real-world microservice system. Second, we construct a transformer-based neural network with both spatial and temporal attention mechanisms to model the inter-correlations between different modalities and temporal dependencies between the data points. This enables us to detect anomalies automatically and accurately in real-time. The source code of MSTGAD is publicly available at <a class="link-external link-https" href="https://github.com/alipay/microservice_system_twin_graph_based_anomaly_detection" rel="external noopener nofollow">this https URL</a>.

Graph neural network based robust anomaly detection at service level in SDN driven microservice system

BertHTLG: Graph-Based Microservice Anomaly Detection Through Sentence-Bert Enhancement.

Self-Supervised Variational Graph Autoencoder for System-Level Anomaly Detection

An Automated Alert Cross-Verification System with Graph Neural Networks for IDS Events

Generative Adversarial Network Models for Anomaly Detection in Software-Defined Networks

Twin Graph-based Anomaly Detection via Attentive Multi-Modal Learning for Microservice System

Unsupervised Detection of Microservice Trace Anomalies Through Service-Level Deep Bayesian Networks

Distributed Online One-Class Support Vector Machine for Anomaly Detection over Networks

An Intelligent Anomaly Detection Scheme for Micro-Services Architectures with Temporal and Spatial Data Analysis.

A survey and classification of the security anomaly detection mechanisms in software defined networks

Abnormal traffic detection system in SDN based on deep learning hybrid models

Network-Wide Forwarding Anomaly Detection and Localization in Software Defined Networks

Application of Fuzzy Decision Support System Based on GNN in Anomaly Detection and Incident Response Service of Intelligent Security

Flow-based intrusion detection on software-defined networks: a multivariate time series anomaly detection approach

Graph neural network approach for anomaly detection

Deep Attentive Anomaly Detection for Microservice Systems with Multimodal Time-Series Data

Unsupervised Anomaly Detection on Microservice Traces through Graph VAE

A Novel Backbone Network Anomaly Detector Via Clustering In Sketch Space

MSCA: an Unsupervised Anomaly Detection System for Network Security in Backbone Network.

Anomaly Detection in Microservice-Based Systems

Graph neural network-based anomaly detection for river network systems