arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 1901.09688cs.SIcs.LG
收藏

Web和社交网络动态中的异常检测

Anomaly detection in the dynamics of web and social networks

Ecole Polytechnique Fédérale de Lausanne(洛桑联邦理工学院)

Volodymyr Miz, Benjamin Ricaud, Kirell Benzi, Pierre Vandergheynst

摘要:

在这项工作中,我们提出了一种新的,快速和可扩展的方法在大型时间演化图的异常检测。它可以是具有动态节点属性(例如时间序列)的静态图,或者是随时间演变的图,例如时间网络。我们将异常定义为节点集群中时间活动的局部增加。该算法是无监督的。它能够检测和跟踪动态网络中的异常活动,尽管有来自多个干扰源的噪声。我们使用Hopfield网络记忆模型来结合图形和时间信息。我们表明,异常可以发现一个很好的精度使用记忆网络。所提出的方法是可扩展的,我们提供了一个分布式实现的算法。为了证明其效率,我们将其应用到两个数据集:安然电子邮件数据集和维基百科页面浏览量。我们表明,异常尖峰是由影响网络动态的现实世界事件触发的。此外,集群的结构和与检测到的事件相关的时间演化分析揭示了人类如何互动,交换和搜索信息的有趣事实,为大型动态数据集上的集体和社会行为的新定量研究打开了大门。

英文摘要:

In this work, we propose a new, fast and scalable method for anomaly detection in large time-evolving graphs. It may be a static graph with dynamic node attributes (e.g. time-series), or a graph evolving in time, such as a temporal network. We define an anomaly as a localized increase in temporal activity in a cluster of nodes. The algorithm is unsupervised. It is able to detect and track anomalous activity in a dynamic network despite the noise from multiple interfering sources. We use the Hopfield network model of memory to combine the graph and time information. We show that anomalies can be spotted with a good precision using a memory network. The presented approach is scalable and we provide a distributed implementation of the algorithm. To demonstrate its efficiency, we apply it to two datasets: Enron Email dataset and Wikipedia page views. We show that the anomalous spikes are triggered by the real-world events that impact the network dynamics. Besides, the structure of the clusters and the analysis of the time evolution associated with the detected events reveals interesting facts on how humans interact, exchange and search for information, opening the door to new quantitative studies on collective and social behavior on large and dynamic datasets.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑