高级检索

    融合动态原型与自监督迁移学习的跨域图异常检测

    Cross-Domain Graph Anomaly Detection via Fusion of Dynamic Prototypes and Self-Supervised Transfer Learning

    • 摘要: 跨域图异常检测旨在利用源域图中的正常与异常样本信息,在标注稀缺的目标域图上实现有效的异常识别.然而,源域与目标域之间通常存在显著的图结构差异与特征分布偏移,导致源域知识难以有效迁移至目标域,限制了跨域泛化能力.此外,目标域缺乏标注信息,易引发训练过程中的决策边界模糊和预测不稳定问题.为解决上述问题,本文提出了一种融合动态原型与自监督迁移学习的跨域图异常检测方法.首先,基于源域中的正常与异常样本构建语义原型,并结合双向引导策略,实现源域原型与目标域节点在共享语义空间中的知识对齐,从而缓解跨域图之间的分布偏移.为进一步增强原型的稳定性与语义判别性,引入指数移动平均机制实现原型的动态更新;随后,通过最小化目标域节点嵌入的熵值,增强特征表示的区分度,以缓解决策边界模糊问题;最后,综合利用源域模型与无监督方法在目标域数据上生成异常评分的伪标签,并筛选高置信度样本作为弱监督信号引导模型迭代优化,从而提升识别的准确性与鲁棒性.实验结果表明,本文方法在多个跨域图异常检测任务中均优于现有主流方法,验证了其在跨域迁移场景下的有效性与稳定性.

       

      Abstract: Cross-domain graph anomaly detection aims to leverage normal and anomaly sample information from a source-domain graph to achieve effective anomaly identification on a target-domain graph with scarce annotations. However, significant differences in graph structures and feature distributions often exist between the source and target domains, making it challenging to transfer knowledge effectively and limiting the model’s cross-domain generalization capability. Moreover, the lack of annotations in the target domain introduces issues such as decision boundary ambiguity and prediction instability during training. To address these challenges, we propose a cross-domain graph anomaly detection method that integrates dynamic prototypes with self-supervised transfer learning. First, semantic prototypes are constructed based on normal and anomaly samples from the source domain, and a bidirectional guidance strategy is applied to align these prototypes with target-domain nodes in a shared semantic space, thereby mitigating the distribution shift across domains. To further enhance the stability and semantic discriminability of the prototypes, an exponential moving average (EMA) mechanism is introduced for dynamic prototype updates. Subsequently, minimizing the entropy of node embeddings in the target domain improves feature representation discriminability, reducing decision boundary ambiguity. Finally, pseudo anomaly scores are generated using a combination of source-domain model predictions and unsupervised methods on the target domain data. High-confidence samples are then selected as week supervision signals to iteratively refine the model, enhancing both detection accuracy and robustness. Experimental results demonstrate that our method outperforms state-of-the-art approaches in various cross-domain graph anomaly detection tasks, validating its effectiveness and stability in cross-domain transfer scenarios.

       

    /

    返回文章
    返回