Search papers, labs, and topics across Lattice.
This paper tackles dynamic graph anomaly detection (DGAD) with limited labeled anomalies by learning a discriminative boundary from normal/unlabeled data while leveraging limited labeled anomalies when available. They propose a model-agnostic framework with residual representation encoding, a restriction loss using co-centered hyperspheres, and a bi-boundary optimization strategy using normalizing flows to model the normal log-likelihood distribution. Experiments demonstrate the framework's superior performance across diverse evaluation settings, indicating improved generalization to unseen anomalies.
Achieve state-of-the-art dynamic graph anomaly detection with limited labels by learning a robust decision boundary around normal data, outperforming methods that overfit to scarce anomalies.
Dynamic graph anomaly detection (DGAD) is critical for many real-world applications but remains challenging due to the scarcity of labeled anomalies. Existing methods are either unsupervised or semi-supervised: unsupervised methods avoid the need for labeled anomalies but often produce ambiguous boundary, whereas semi-supervised methods can overfit to the limited labeled anomalies and generalize poorly to unseen anomalies. To address this gap, we consider a largely underexplored problem in DGAD: learning a discriminative boundary from normal/unlabeled data, while leveraging limited labeled anomalies \textbf{when available} without sacrificing generalization to unseen anomalies. To this end, we propose an effective, generalizable, and model-agnostic framework with three main components: (i) residual representation encoding that capture deviations between current interactions and their historical context, providing anomaly-relevant signals; (ii) a restriction loss that constrain the normal representations within an interval bounded by two co-centered hyperspheres, ensuring consistent scales while keeping anomalies separable; (iii) a bi-boundary optimization strategy that learns a discriminative and robust boundary using the normal log-likelihood distribution modeled by a normalizing flow. Extensive experiments demonstrate the superiority of our framework across diverse evaluation settings.
Mila