{"id":"https://openalex.org/W7204185418","doi":"https://doi.org/10.21203/rs.3.rs-10794892/v1","title":"Dual Spatial-Temporal Shapley Attribution for Explainable Anomaly Detection in Dynamic Social Graphs","display_name":"Dual Spatial-Temporal Shapley Attribution for Explainable Anomaly Detection in Dynamic Social Graphs","publication_year":2026,"publication_date":"2026-08-25","ids":{"openalex":"https://openalex.org/W7204185418","doi":"https://doi.org/10.21203/rs.3.rs-10794892/v1"},"language":"en","primary_location":{"id":"doi:10.21203/rs.3.rs-10794892/v1","doi":"https://doi.org/10.21203/rs.3.rs-10794892/v1","is_oa":true,"landing_page_url":"https://doi.org/10.21203/rs.3.rs-10794892/v1","pdf_url":"https://www.researchsquare.com/article/rs-10794892/latest.pdf","source":{"id":"https://openalex.org/S4306525896","display_name":"Research Square","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":"Research Square","raw_type":"posted-content"},"volume":null,"type":"preprint","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://www.researchsquare.com/article/rs-10794892/latest.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5135357618","display_name":"Iyad Assaad Nekka","orcid":"https://orcid.org/0009-0000-8023-5392","observed_orcids":["https://orcid.org/0009-0000-8023-5392"]},"institutions":[{"id":"https://openalex.org/I4210149016","display_name":"\u00c9cole Nationale Sup\u00e9rieure d'Informatique","ror":"https://ror.org/04dj1dn66","country_code":"DZ","type":"education","lineage":["https://openalex.org/I4210149016"]}],"countries":["DZ"],"is_corresponding":false,"raw_author_name":"Iyad Assaad NEKKA","raw_affiliation_strings":["Higher National School of Computer Science - ESI ex INI ex CERI, Algiers -"],"raw_orcid":"https://orcid.org/0009-0000-8023-5392","affiliations":[{"raw_affiliation_string":"Higher National School of Computer Science - ESI ex INI ex CERI, Algiers -","institution_ids":["https://openalex.org/I4210149016"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5005723915","display_name":"Hamida Seba","orcid":"https://orcid.org/0000-0003-0670-815X","observed_orcids":["https://orcid.org/0000-0003-0670-815X"]},"institutions":[{"id":"https://openalex.org/I100532134","display_name":"Lyon 1 Universit\u00e9","ror":"https://ror.org/029brtt94","country_code":"FR","type":"education","lineage":["https://openalex.org/I100532134","https://openalex.org/I203339264"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Hamida seba","raw_affiliation_strings":["Claude Bernard University Lyon 1"],"raw_orcid":"https://orcid.org/0000-0003-0670-815X","affiliations":[{"raw_affiliation_string":"Claude Bernard University Lyon 1","institution_ids":["https://openalex.org/I100532134"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5038137848","display_name":"Walid-Khaled Hidouci","orcid":"https://orcid.org/0000-0002-8290-1093","observed_orcids":["https://orcid.org/0000-0002-8290-1093"]},"institutions":[{"id":"https://openalex.org/I4210149016","display_name":"\u00c9cole Nationale Sup\u00e9rieure d'Informatique","ror":"https://ror.org/04dj1dn66","country_code":"DZ","type":"education","lineage":["https://openalex.org/I4210149016"]}],"countries":["DZ"],"is_corresponding":false,"raw_author_name":"Walid Khaled Hidouci","raw_affiliation_strings":["Higher National School of Computer Science - ESI ex INI ex CERI, Algiers, Algeria -"],"raw_orcid":"https://orcid.org/0000-0002-8290-1093","affiliations":[{"raw_affiliation_string":"Higher National School of Computer Science - ESI ex INI ex CERI, Algiers, Algeria -","institution_ids":["https://openalex.org/I4210149016"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5015511374","display_name":"Karima Amrouche","orcid":"https://orcid.org/0009-0002-6785-7394","observed_orcids":["https://orcid.org/0009-0002-6785-7394","https://orcid.org/0009-0009-2410-2582"]},"institutions":[{"id":"https://openalex.org/I4210149016","display_name":"\u00c9cole Nationale Sup\u00e9rieure d'Informatique","ror":"https://ror.org/04dj1dn66","country_code":"DZ","type":"education","lineage":["https://openalex.org/I4210149016"]}],"countries":["DZ"],"is_corresponding":false,"raw_author_name":"Karima Amrouche","raw_affiliation_strings":["Higher National School of Computer Science - ESI ex INI ex CERI, Algiers, Algeria -"],"raw_orcid":"https://orcid.org/0009-0002-6785-7394","affiliations":[{"raw_affiliation_string":"Higher National School of Computer Science - ESI ex INI ex CERI, Algiers, Algeria -","institution_ids":["https://openalex.org/I4210149016"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.9955999851226807,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.9955999851226807,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.001500000013038516,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.0005000000237487257,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"anomaly detection","score":0.8149999976158142},{"id":"https://openalex.org/keywords/explainable-ai","display_name":"explainable AI","score":0.871999979019165},{"id":"https://openalex.org/keywords/shapley-value","display_name":"Shapley value","score":0.9390000104904175},{"id":"https://openalex.org/keywords/post-hoc-explanation","display_name":"post-hoc explanation","score":0.7329999804496765},{"id":"https://openalex.org/keywords/fraud-detection","display_name":"fraud detection","score":0.47999998927116394}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6710000038146973},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.6373999714851379},{"id":"https://openalex.org/C143299363","wikidata":"https://www.wikidata.org/wiki/Q900584","display_name":"Attribution","level":2,"score":0.5044999718666077},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.44780001044273376},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.44369998574256897},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.43650001287460327},{"id":"https://openalex.org/C64869954","wikidata":"https://www.wikidata.org/wiki/Q1859747","display_name":"False positive paradox","level":2,"score":0.4318999946117401},{"id":"https://openalex.org/C55282118","wikidata":"https://www.wikidata.org/wiki/Q252683","display_name":"Snapshot (computer storage)","level":2,"score":0.4018999934196472},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.39750000834465027},{"id":"https://openalex.org/C2776459999","wikidata":"https://www.wikidata.org/wiki/Q2119376","display_name":"Fidelity","level":2,"score":0.3711000084877014},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.37049999833106995},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.3637000024318695},{"id":"https://openalex.org/C2780980858","wikidata":"https://www.wikidata.org/wiki/Q110022","display_name":"Dual (grammatical number)","level":2,"score":0.3621000051498413},{"id":"https://openalex.org/C152745839","wikidata":"https://www.wikidata.org/wiki/Q5438153","display_name":"Fault detection and isolation","level":3,"score":0.34850001335144043},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3221000134944916},{"id":"https://openalex.org/C147494362","wikidata":"https://www.wikidata.org/wiki/Q2078905","display_name":"Troubleshooting","level":2,"score":0.32179999351501465},{"id":"https://openalex.org/C48145219","wikidata":"https://www.wikidata.org/wiki/Q1335365","display_name":"Security token","level":2,"score":0.3124000132083893},{"id":"https://openalex.org/C42355184","wikidata":"https://www.wikidata.org/wiki/Q1361088","display_name":"Matrix decomposition","level":3,"score":0.3084000051021576},{"id":"https://openalex.org/C99498987","wikidata":"https://www.wikidata.org/wiki/Q2210247","display_name":"Noise (video)","level":3,"score":0.30550000071525574},{"id":"https://openalex.org/C79337645","wikidata":"https://www.wikidata.org/wiki/Q779824","display_name":"Outlier","level":2,"score":0.3050999939441681},{"id":"https://openalex.org/C2780695315","wikidata":"https://www.wikidata.org/wiki/Q3799040","display_name":"Unobservable","level":2,"score":0.30149999260902405},{"id":"https://openalex.org/C79581498","wikidata":"https://www.wikidata.org/wiki/Q1367530","display_name":"Suite","level":2,"score":0.2838999927043915},{"id":"https://openalex.org/C153180980","wikidata":"https://www.wikidata.org/wiki/Q19776675","display_name":"Commit","level":2,"score":0.2825999855995178},{"id":"https://openalex.org/C160145156","wikidata":"https://www.wikidata.org/wiki/Q778586","display_name":"Executable","level":2,"score":0.26919999718666077},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.26159998774528503},{"id":"https://openalex.org/C177142836","wikidata":"https://www.wikidata.org/wiki/Q44455","display_name":"Game theory","level":2,"score":0.25870001316070557},{"id":"https://openalex.org/C146380142","wikidata":"https://www.wikidata.org/wiki/Q1137726","display_name":"Directed graph","level":2,"score":0.25609999895095825},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.2558000087738037},{"id":"https://openalex.org/C37616216","wikidata":"https://www.wikidata.org/wiki/Q3218363","display_name":"Lasso (programming language)","level":2,"score":0.2542000114917755}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.21203/rs.3.rs-10794892/v1","doi":"https://doi.org/10.21203/rs.3.rs-10794892/v1","is_oa":true,"landing_page_url":"https://doi.org/10.21203/rs.3.rs-10794892/v1","pdf_url":"https://www.researchsquare.com/article/rs-10794892/latest.pdf","source":{"id":"https://openalex.org/S4306525896","display_name":"Research Square","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":"Research Square","raw_type":"posted-content"}],"best_oa_location":{"id":"doi:10.21203/rs.3.rs-10794892/v1","doi":"https://doi.org/10.21203/rs.3.rs-10794892/v1","is_oa":true,"landing_page_url":"https://doi.org/10.21203/rs.3.rs-10794892/v1","pdf_url":"https://www.researchsquare.com/article/rs-10794892/latest.pdf","source":{"id":"https://openalex.org/S4306525896","display_name":"Research Square","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":"Research Square","raw_type":"posted-content"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7204185418.pdf","grobid_xml":"https://content.openalex.org/works/W7204185418.grobid-xml"},"referenced_works_count":2,"referenced_works":["https://openalex.org/W4401863468","https://openalex.org/W4409390844"],"related_works":["https://openalex.org/W7203456627","https://openalex.org/W7204209839","https://openalex.org/W7204225225","https://openalex.org/W7204349929","https://openalex.org/W7203680153","https://openalex.org/W7160277096","https://openalex.org/W7204269266","https://openalex.org/W2765322193","https://openalex.org/W7151023559","https://openalex.org/W3185240666"],"abstract_inverted_index":{"Abstract":[0],"Anomaly":[1],"detection":[2,49,205],"in":[3],"dynamic":[4,168],"social":[5,23,169],"graphs":[6],"is":[7,62,196],"a":[8,69,81,87,102,113,150],"critical":[9],"challenge":[10],"across":[11,198,216],"high-stakes":[12],"settings":[13],"including":[14],"online":[15],"trust":[16],"and":[17,26,71,92,112,193,222],"rating":[18],"communities,":[19],"coordinated":[20],"inauthentic":[21],"behaviour,":[22],"platform":[24],"moderation":[25],"fraud":[27],"analysis,":[28],"where":[29],"accountability":[30],"frameworks":[31],"demand":[32],"that":[33,77,85,131,155],"automated":[34],"decisions":[35],"be":[36],"accompanied":[37],"by":[38],"human-interpretable":[39],"justifications.":[40],"State-of-theart":[41],"Transformer-based":[42],"detectors":[43],"such":[44],"as":[45,64],"TADDY":[46,90],"achieve":[47],"strong":[48],"performance":[50,206],"but":[51],"produce":[52],"no":[53,132],"explanation":[54,177],"whatsoever":[55],"for":[56,94,182],"their":[57],"decisions:":[58],"when":[59],"an":[60],"edge":[61],"flagged":[63,96],"anomalous,":[65],"the":[66,110,121,140,157],"analyst":[67],"receives":[68],"score":[70],"nothing":[72],"more.":[73],"This":[74,124],"paper":[75],"closes":[76],"gap.":[78],"We":[79,164],"present":[80],"post-hoc":[82],"explainability":[83],"framework":[84,138],"wraps":[86],"trained,":[88],"frozen":[89],"model":[91],"produces,":[93],"each":[95],"edge,":[97],"two":[98,128],"complementary":[99],"attribution":[100,104,115],"vectors:":[101],"spatial":[103],"identifying":[105,116],"which":[106,117],"neighbour":[107],"nodes":[108],"drove":[109],"anomaly,":[111],"temporal":[114],"historical":[118],"snapshots":[119],"carried":[120],"strongest":[122],"signal.":[123],"dual":[125],"decomposition":[126],"answers":[127],"distinct":[129],"questions":[130],"prior":[133],"method":[134],"addresses":[135],"simultaneously.":[136],"The":[137],"adapts":[139],"GraphSVX":[141],"Shapley":[142],"surrogate":[143],"to":[144,173,204],"TADDY\u2019s":[145],"windowed":[146],"token":[147],"architecture":[148],"through":[149],"graph-aware":[151],"embedding-space":[152],"perturbation":[153],"strategy":[154],"avoids":[156],"pathological":[158],"artefacts":[159],"of":[160],"naive":[161],"index-space":[162],"masking.":[163],"evaluate":[165],"on":[166],"three":[167],"graph":[170],"benchmarks.":[171],"Prior":[172],"this":[174],"work,":[175],"all":[176,199,217],"quality":[178],"metrics":[179],"are":[180],"undefined":[181],"TADDY.":[183],"After":[184],"applying":[185],"our":[186],"framework,":[187],"Fidelity":[188],"reaches":[189],"0.9562,":[190],"Sufficiency":[191],"0.9658,":[192],"positive":[194],"Comprehensiveness":[195],"confirmed":[197],"datasets,":[200],"at":[201,227],"zero":[202],"cost":[203],"(\u2206AUC":[207],"=":[208],"0.0000).":[209],"An":[210],"expanded":[211],"evaluation":[212],"covering":[213],"2,471":[214],"edges":[215],"true":[218],"positives,":[219],"false":[220],"positives":[221],"low-confidence":[223],"detections":[224],"confirms":[225],"robustness":[226],"scale.":[228]},"counts_by_year":[],"updated_date":"2026-11-04T10:54:05.112534","created_date":"2026-08-26T00:00:00"}