MIDAS: MIcrocluster-based Detector of Anomalies in Edge Streams

Cited 0 time in webofscience Cited 0 time in scopus
  • Hit : 215
  • Download : 0
Given a stream of graph edges from a dynamic graph, how can we assign anomaly scores to edges in an online manner, for the purpose of detecting unusual behavior, using constant time and memory? Existing approaches aim to detect individually surprising edges. In this work, we propose MIDAS, which focuses on detecting, microcluster anomalies, or suddenly arriving groups of suspiciously similar edges, such as lockstep behavior, including denial of service attacks in network traffic data. MIDAS has the following properties: (a) it detects microcluster anomalies while providing theoretical guarantees about its false positive probability; (b) it is online, thus processing each edge in constant time and constant memory, and also processes the data 108 - 505 times faster than state-of-the-art approaches; (c) it provides 46%-52% higher accuracy (in terms of AUC) than state-of-the-art approaches.
Publisher
Association for the Advancement of Artificial Intelligence
Issue Date
2020-02-10
Language
English
Citation

The Thirty-Fourth AAAI Conference on Artificial Intelligence (AAAI), pp.3243 - 3250

ISSN
2159-5399
URI
http://hdl.handle.net/10203/272453
Appears in Collection
RIMS Conference Papers
Files in This Item
There are no files associated with this item.

qr_code

  • mendeley

    citeulike


rss_1.0 rss_2.0 atom_1.0