Abstract:With the frequent occurrence of network security incidents in recent years, it has become very important to detect anomalous behaviour in networks as early and accurately as possible. Anomaly detection can improve the security of complex network systems by detecting abnormal and unreliable nodes, and thus it has become a hot research direction that has attracted wide attention. At present, abstracting real complex systems into complex networks for anomaly detection is the mainstream research method. However, the existing methods still have challenges in extracting network heterogeneity information and attribute information, so we propose a multi-view based anomaly detection method for heterogeneous attributed networks, MVAD HAN. This method can better extract the heterogeneous structural information and rich attribute information of the network to model heterogeneous attributed networks. Our method adopts an encoder-decoder architecture. First, in the encoder part, we use the Heterogeneous Graph Transformer with multiple views to learn node embeddings that fuse the heterogeneous information of the network. In the decoder part, we use an inner product decoder to reconstruct the network topology, a multilayer perceptron-based decoder to better reconstruct the network attribute information, and a linear projection to reconstruct the node type information of the network. Finally, we compute an anomaly score for each node using three reconstruction errors: network structure, attributes and node type. The higher the reconstruction error of a node, the higher the anomaly score and the higher the probability of an anomaly. Finally, anomalous nodes are identified by ranking the anomaly scores and setting a threshold. We validate the effectiveness of the proposed method on four real-world datasets. The experimental results show that this method outperforms several of the baseline methods and has a good performance in anomaly detection.

Anomaly detection by discovering bipartite structure on complex networks

Anomaly detection on bipartite graphs for cyber situational awareness and threat detection

Anomaly, reciprocity, and community detection in networks

Internet Anomaly Detection Based on Complex Network Path

ANOMALOUS: A Joint Modeling Approach for Anomaly Detection on Attributed Networks

Anomaly Detection Based on Traffic Information Structure

Distributed Online One-Class Support Vector Machine for Anomaly Detection over Networks

Anomaly Detection in Networks with Application to Financial Transaction Networks

Anomaly Detection in Multiplex Dynamic Networks: from Blockchain Security to Brain Disease Prediction

Community detection and anomaly prediction in dynamic networks

An Effective Method for Computer Network Anomaly Detection

Multi-representations Space Separation based Graph-level Anomaly-aware Detection

Higher-order Structure Based Anomaly Detection on Attributed Networks

Subtle Anomaly Detection in Dynamic Networks Using Graph Spectra

Anomaly Detection With Kernel Preserving Embedding

Multi-scale Anomaly Detection on Attributed Networks

Anomaly Subgraph Mining in Large-Scale Social Networks.

Anomaly Detection with Subgraph Search and Vertex Classification Preprocessing in Chung-Lu Random Networks

Anomaly detection in online social networks

Incorporating Network Structure with Node Information for Semi-supervised Anomaly Detection on Attributed Graphs.

MVAD HAN: A Multi-View Based Anomaly Detection Method for Heterogeneous Attributed Networks