{"id":"https://openalex.org/W7203680153","doi":"https://doi.org/10.48550/arxiv.2608.15559","title":"Amortised Post-Hoc Explanation with Exact Preservation for Dynamic Graph Anomaly Detectors","display_name":"Amortised Post-Hoc Explanation with Exact Preservation for Dynamic Graph Anomaly Detectors","publication_year":2026,"publication_date":"2026-08-16","ids":{"openalex":"https://openalex.org/W7203680153","doi":"https://doi.org/10.48550/arxiv.2608.15559"},"language":"en","primary_location":{"id":"pmh:oai:arXiv.org:2608.15559","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2608.15559","pdf_url":"https://arxiv.org/pdf/2608.15559","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"volume":null,"type":"preprint","is_traditional":true,"indexed_in":["arxiv","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2608.15559","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5135357618","display_name":"Iyad Assaad Nekka","orcid":"https://orcid.org/0009-0000-8023-5392","observed_orcids":["https://orcid.org/0009-0000-8023-5392"]},"institutions":[{"id":"https://openalex.org/I4210149016","display_name":"\u00c9cole Nationale Sup\u00e9rieure d'Informatique","ror":"https://ror.org/04dj1dn66","country_code":"DZ","type":"education","lineage":["https://openalex.org/I4210149016"]}],"countries":["DZ"],"is_corresponding":false,"raw_author_name":"Nekka, Iyad Assaad","raw_affiliation_strings":["LCSI Laboratory , National higher School of Computer Science (ESI) , Algiers , Algeria Universit\u00e9 Claude Bernard Lyon , Lyon , France"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"LCSI Laboratory , National higher School of Computer Science (ESI) , Algiers , Algeria Universit\u00e9 Claude Bernard Lyon , Lyon , France","institution_ids":["https://openalex.org/I4210149016"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5005723915","display_name":"Hamida Seba","orcid":"https://orcid.org/0000-0003-0670-815X","observed_orcids":["https://orcid.org/0000-0003-0670-815X"]},"institutions":[{"id":"https://openalex.org/I4210149016","display_name":"\u00c9cole Nationale Sup\u00e9rieure d'Informatique","ror":"https://ror.org/04dj1dn66","country_code":"DZ","type":"education","lineage":["https://openalex.org/I4210149016"]}],"countries":["DZ"],"is_corresponding":false,"raw_author_name":"Seba, Hamida","raw_affiliation_strings":["LCSI Laboratory , National higher School of Computer Science (ESI) , Algiers , Algeria Universit\u00e9 Claude Bernard Lyon , Lyon , France"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"LCSI Laboratory , National higher School of Computer Science (ESI) , Algiers , Algeria Universit\u00e9 Claude Bernard Lyon , Lyon , France","institution_ids":["https://openalex.org/I4210149016"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5109557314","display_name":"Walid Khaled Hidouci","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hidouci, Walid Khaled","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5015511374","display_name":"Karima Amrouche","orcid":"https://orcid.org/0009-0002-6785-7394","observed_orcids":["https://orcid.org/0009-0002-6785-7394","https://orcid.org/0009-0009-2410-2582"]},"institutions":[{"id":"https://openalex.org/I4210149016","display_name":"\u00c9cole Nationale Sup\u00e9rieure d'Informatique","ror":"https://ror.org/04dj1dn66","country_code":"DZ","type":"education","lineage":["https://openalex.org/I4210149016"]}],"countries":["DZ"],"is_corresponding":false,"raw_author_name":"Amrouche, Karima","raw_affiliation_strings":["LCSI Laboratory , National higher School of Computer Science (ESI) , Algiers , Algeria Universit\u00e9 Claude Bernard Lyon , Lyon , France"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"LCSI Laboratory , National higher School of Computer Science (ESI) , Algiers , Algeria Universit\u00e9 Claude Bernard Lyon , Lyon , France","institution_ids":["https://openalex.org/I4210149016"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.9937000274658203,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.9937000274658203,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.00139999995008111,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.0012000000569969416,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/post-hoc-explanation","display_name":"post-hoc explanation","score":0.9120000004768372},{"id":"https://openalex.org/keywords/explainable-ai","display_name":"explainable AI","score":0.5529999732971191},{"id":"https://openalex.org/keywords/financial-fraud-detection","display_name":"financial fraud detection","score":0.7540000081062317},{"id":"https://openalex.org/keywords/intrusion-detection","display_name":"intrusion detection","score":0.7129999995231628},{"id":"https://openalex.org/keywords/graph-neural-networks","display_name":"graph neural networks","score":0.4339999854564667}],"concepts":[{"id":"https://openalex.org/C143299363","wikidata":"https://www.wikidata.org/wiki/Q900584","display_name":"Attribution","level":2,"score":0.7052000164985657},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.5663999915122986},{"id":"https://openalex.org/C42747912","wikidata":"https://www.wikidata.org/wiki/Q1048447","display_name":"Multiplicative function","level":2,"score":0.5604000091552734},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5324000120162964},{"id":"https://openalex.org/C55282118","wikidata":"https://www.wikidata.org/wiki/Q252683","display_name":"Snapshot (computer storage)","level":2,"score":0.5062000155448914},{"id":"https://openalex.org/C94915269","wikidata":"https://www.wikidata.org/wiki/Q1834857","display_name":"Detector","level":2,"score":0.4544000029563904},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4359000027179718},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.39410001039505005},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.3917999863624573},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.34850001335144043},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3228999972343445},{"id":"https://openalex.org/C2776836416","wikidata":"https://www.wikidata.org/wiki/Q1364844","display_name":"False alarm","level":2,"score":0.3172000050544739},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.31450000405311584},{"id":"https://openalex.org/C112972136","wikidata":"https://www.wikidata.org/wiki/Q7595718","display_name":"Stability (learning theory)","level":2,"score":0.31060001254081726},{"id":"https://openalex.org/C2780980858","wikidata":"https://www.wikidata.org/wiki/Q110022","display_name":"Dual (grammatical number)","level":2,"score":0.302700012922287},{"id":"https://openalex.org/C2164484","wikidata":"https://www.wikidata.org/wiki/Q5170150","display_name":"Core (optical fiber)","level":2,"score":0.28610000014305115},{"id":"https://openalex.org/C88230418","wikidata":"https://www.wikidata.org/wiki/Q131476","display_name":"Graph theory","level":2,"score":0.28279998898506165},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.26910001039505005},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.26179999113082886},{"id":"https://openalex.org/C77052588","wikidata":"https://www.wikidata.org/wiki/Q644307","display_name":"Constant false alarm rate","level":2,"score":0.25929999351501465}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:arXiv.org:2608.15559","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2608.15559","pdf_url":"https://arxiv.org/pdf/2608.15559","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2608.15559","doi":"https://doi.org/10.48550/arxiv.2608.15559","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2608.15559","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2608.15559","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2608.15559","pdf_url":"https://arxiv.org/pdf/2608.15559","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7203680153.pdf","grobid_xml":"https://content.openalex.org/works/W7203680153.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W7204349929","https://openalex.org/W7203456627","https://openalex.org/W7204269266","https://openalex.org/W7212331627","https://openalex.org/W7204225225","https://openalex.org/W7204172786","https://openalex.org/W7160277096","https://openalex.org/W7204225146","https://openalex.org/W3024966284","https://openalex.org/W2522429841"],"abstract_inverted_index":{"Anomaly":[0],"detection":[1,121],"in":[2,24,85,110],"dynamic":[3],"graphs":[4],"underpins":[5],"financial":[6],"fraud":[7],"analysis,":[8],"intrusion":[9],"detection,":[10],"and":[11,70,92,176,184,200,234],"platform":[12],"integrity,":[13],"where":[14],"automated":[15],"decisions":[16],"require":[17],"human-interpretable":[18],"justifications.":[19],"StrGNN,":[20],"the":[21,35,86,90,101,111,115,159,189,223],"strongest":[22],"performer":[23],"recent":[25],"benchmarks,":[26],"produces":[27],"no":[28,48],"explanation:":[29],"when":[30],"an":[31,118,152],"edge":[32],"is":[33,117,122,212],"flagged,":[34],"analyst":[36],"receives":[37],"only":[38],"a":[39,60,66,78,93,206],"score.":[40],"Explanation":[41],"metrics":[42],"are":[43,105,237],"undefined":[44],"for":[45,72,167],"StrGNN":[46,69],"because":[47],"attribution":[49,80,95,165,203],"vector":[50],"exists.":[51],"This":[52],"paper":[53],"closes":[54],"that":[55,64,230],"gap.":[56],"We":[57,157],"present":[58],"X-StrGNN,":[59],"post-hoc":[61],"explanation":[62,150],"layer":[63,116],"wraps":[65],"trained,":[67],"frozen":[68],"emits,":[71],"every":[73],"flagged":[74],"edge,":[75,148],"dual":[76],"attributions:":[77],"structural":[79],"identifying":[81,96],"which":[82,97],"contextual":[83],"interactions":[84],"enclosing":[87],"subgraph":[88],"drove":[89],"decision,":[91],"temporal":[94,202],"historical":[98],"snapshot":[99],"carried":[100],"signal.":[102],"Both":[103],"attributions":[104],"multiplicative":[106],"masks":[107],"identically":[108],"one":[109,180,182],"unexplained":[112],"pass,":[113],"so":[114],"exact":[119],"pass-through:":[120],"preserved":[123],"to":[124],"machine":[125],"precision,":[126],"verified":[127],"rather":[128],"than":[129,197,215],"asserted":[130],"(Delta":[131],"AUC":[132],"=":[133,137,141],"0.0000,":[134,138],"Delta":[135,139],"AP":[136],"P@100":[140],"0.0000).":[142],"Attribution":[143],"costs":[144],"0.66":[145],"ms":[146],"per":[147],"making":[149],"of":[151,164,210],"entire":[153],"alarm":[154],"list":[155],"feasible.":[156],"conduct":[158],"first":[160],"controlled":[161],"design":[162],"study":[163],"strategies":[166],"this":[168],"architecture,":[169],"comparing":[170],"gradient":[171],"attribution,":[172],"per-instance":[173,198,220],"mask":[174],"optimisation,":[175,199],"amortised":[177],"parameterisation":[178],"under":[179],"protocol,":[181,233],"budget,":[183],"three":[185],"seeds.":[186],"X-StrGNN":[187],"attains":[188],"highest":[190],"stability":[191],"(0.913)":[192],"at":[193],"268x":[194],"lower":[195],"cost":[196],"its":[201,216],"(1.601":[204],"against":[205],"measured":[207],"random":[208],"floor":[209],"0.973)":[211],"separably":[213],"better":[214],"ablated":[217],"control,":[218],"while":[219],"optimisation":[221],"-":[222,227],"most":[224],"expensive":[225],"strategy":[226],"falls":[228],"below":[229],"floor.":[231],"Code,":[232],"per-seed":[235],"measurements":[236],"released.":[238]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-11-04T10:54:05.112534","created_date":"2026-08-19T00:00:00"}