高级检索

    融合动态原型与自监督迁移学习的跨域图异常检测

    Cross-Domain Graph Anomaly Detection via Fusion of Dynamic Prototypes and Self-Supervised Transfer Learning

    • 摘要: 跨域图异常检测旨在利用源域图中的正常与异常样本信息,在标注稀缺的目标域图上实现有效的异常识别。然而,源域与目标域之间通常存在显著的图结构差异与特征分布偏移,导致源域知识难以有效迁移至目标域,限制了跨域泛化能力。此外,目标域缺乏标注信息,易引发训练过程中的决策边界模糊和预测不稳定问题。为解决上述问题,提出了一种融合动态原型与自监督迁移学习的跨域图异常检测方法。首先,基于源域中的正常与异常样本构建语义原型,并结合双向引导策略,实现源域原型与目标域节点在共享语义空间中的知识对齐,从而缓解跨域图之间的分布偏移。为进一步增强原型的稳定性与语义判别性,引入指数移动平均机制实现原型的动态更新;随后,通过最小化目标域节点嵌入的熵值,增强特征表示的区分度,以缓解决策边界模糊问题;最后,综合利用源域模型与无监督方法在目标域数据上生成异常评分的伪标签,并筛选高置信度样本作为弱监督信号引导模型迭代优化,从而提升识别的准确性与鲁棒性。实验结果表明,该方法在多个跨域图异常检测任务中均优于现有主流方法,验证了其在跨域迁移场景下的有效性与稳定性。

       

      Abstract: Cross-domain graph anomaly detection aims to identify anomalies in a target-domain graph with limited labels, by leveraging both normal and anomalous samples from a source-domain graph. However, significant discrepancies in graph structures and feature distributions between different domains hinder effective knowledge transfer and limit cross-domain generalization. Moreover, the scarcity of labeled data in the target domain often induces ambiguous decision boundaries and unstable predictions during training. To address these challenges, we propose a cross-domain graph anomaly detection method that integrates dynamic prototypes with self-supervised transfer learning. Specifically, semantic prototypes are first constructed from the normal and anomaly samples in the source domain, and a bidirectional guidance strategy is then employed to align these prototypes with target-domain nodes in a shared semantic space, thereby alleviating cross-domain distribution shifts. To further enhance the stability and semantic discriminability, an exponential moving average mechanism is introduced for dynamic prototype updating. Subsequently, entropy minimization is applied to target-domain node embeddings to improve feature discriminability and reduce decision boundary ambiguity. Finally, pseudo anomaly scores can be well obtained by combining source-domain model predictions with unsupervised clustering results on the target domain data. Accordingly, high-confidence samples are selected as week supervision signals to iteratively refine the model, thereby improving both detection accuracy and robustness. Experimental results demonstrate that our method consistently outperforms state-of-the-art approaches in various cross-domain graph anomaly detection tasks, while validating its effectiveness and stability in cross-domain transfer scenarios.

       

    /

    返回文章
    返回