{"id":"https://openalex.org/W7131636932","doi":"https://doi.org/10.1109/ickg66886.2025.00017","title":"Adaptive-GraphSketch: Real-Time Edge Anomaly Detection via Multi-Layer Tensor Sketching and Temporal Decay","display_name":"Adaptive-GraphSketch: Real-Time Edge Anomaly Detection via Multi-Layer Tensor Sketching and Temporal Decay","publication_year":2025,"publication_date":"2025-11-13","ids":{"openalex":"https://openalex.org/W7131636932","doi":"https://doi.org/10.1109/ickg66886.2025.00017"},"language":null,"primary_location":{"id":"doi:10.1109/ickg66886.2025.00017","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ickg66886.2025.00017","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE International Conference on Knowledge Graph (ICKG)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5093511478","display_name":"Ocheme Anthony Ekle","orcid":"https://orcid.org/0009-0003-6204-0657"},"institutions":[{"id":"https://openalex.org/I63920570","display_name":"Tennessee Technological University","ror":"https://ror.org/05drmrq39","country_code":"US","type":"education","lineage":["https://openalex.org/I63920570"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ocheme Anthony Ekle","raw_affiliation_strings":["Tennessee Technological University,Department of Computer Science,Cookeville,TN,USA,38505"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tennessee Technological University,Department of Computer Science,Cookeville,TN,USA,38505","institution_ids":["https://openalex.org/I63920570"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5011439658","display_name":"William Eberle","orcid":"https://orcid.org/0009-0009-1303-6102"},"institutions":[{"id":"https://openalex.org/I63920570","display_name":"Tennessee Technological University","ror":"https://ror.org/05drmrq39","country_code":"US","type":"education","lineage":["https://openalex.org/I63920570"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"William Eberle","raw_affiliation_strings":["Tennessee Technological University,Department of Computer Science,Cookeville,TN,USA,38505"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tennessee Technological University,Department of Computer Science,Cookeville,TN,USA,38505","institution_ids":["https://openalex.org/I63920570"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.82153036,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"74","last_page":"81"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.4650000035762787,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.4650000035762787,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12303","display_name":"Tensor decomposition and applications","score":0.12030000239610672,"subfield":{"id":"https://openalex.org/subfields/2605","display_name":"Computational Mathematics"},"field":{"id":"https://openalex.org/fields/26","display_name":"Mathematics"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.05139999836683273,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.7522000074386597},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.5270000100135803},{"id":"https://openalex.org/keywords/probabilistic-logic","display_name":"Probabilistic logic","score":0.5184999704360962},{"id":"https://openalex.org/keywords/enhanced-data-rates-for-gsm-evolution","display_name":"Enhanced Data Rates for GSM Evolution","score":0.4950000047683716},{"id":"https://openalex.org/keywords/hash-function","display_name":"Hash function","score":0.48240000009536743},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.4602999985218048},{"id":"https://openalex.org/keywords/thresholding","display_name":"Thresholding","score":0.45249998569488525},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.4465000033378601},{"id":"https://openalex.org/keywords/bounded-function","display_name":"Bounded function","score":0.4027000069618225}],"concepts":[{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.7522000074386597},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6370999813079834},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.5270000100135803},{"id":"https://openalex.org/C49937458","wikidata":"https://www.wikidata.org/wiki/Q2599292","display_name":"Probabilistic logic","level":2,"score":0.5184999704360962},{"id":"https://openalex.org/C162307627","wikidata":"https://www.wikidata.org/wiki/Q204833","display_name":"Enhanced Data Rates for GSM Evolution","level":2,"score":0.4950000047683716},{"id":"https://openalex.org/C99138194","wikidata":"https://www.wikidata.org/wiki/Q183427","display_name":"Hash function","level":2,"score":0.48240000009536743},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.4602999985218048},{"id":"https://openalex.org/C191178318","wikidata":"https://www.wikidata.org/wiki/Q2256906","display_name":"Thresholding","level":3,"score":0.45249998569488525},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.4465000033378601},{"id":"https://openalex.org/C34388435","wikidata":"https://www.wikidata.org/wiki/Q2267362","display_name":"Bounded function","level":2,"score":0.4027000069618225},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4016999900341034},{"id":"https://openalex.org/C107673813","wikidata":"https://www.wikidata.org/wiki/Q812534","display_name":"Bayesian probability","level":2,"score":0.39419999718666077},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.38760000467300415},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.3817000091075897},{"id":"https://openalex.org/C155281189","wikidata":"https://www.wikidata.org/wiki/Q3518150","display_name":"Tensor (intrinsic definition)","level":2,"score":0.3720000088214874},{"id":"https://openalex.org/C2779231336","wikidata":"https://www.wikidata.org/wiki/Q7534724","display_name":"Sketch","level":2,"score":0.3628000020980835},{"id":"https://openalex.org/C177606310","wikidata":"https://www.wikidata.org/wiki/Q5674297","display_name":"Adaptability","level":2,"score":0.3617999851703644},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.361299991607666},{"id":"https://openalex.org/C185429906","wikidata":"https://www.wikidata.org/wiki/Q1130160","display_name":"Estimator","level":2,"score":0.3314000070095062},{"id":"https://openalex.org/C193536780","wikidata":"https://www.wikidata.org/wiki/Q1513153","display_name":"Edge detection","level":4,"score":0.3089999854564667},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.30489999055862427},{"id":"https://openalex.org/C2777210771","wikidata":"https://www.wikidata.org/wiki/Q4927124","display_name":"Block (permutation group theory)","level":2,"score":0.28850001096725464},{"id":"https://openalex.org/C160234255","wikidata":"https://www.wikidata.org/wiki/Q812535","display_name":"Bayesian inference","level":3,"score":0.28119999170303345},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.2759999930858612},{"id":"https://openalex.org/C2776151529","wikidata":"https://www.wikidata.org/wiki/Q3045304","display_name":"Object detection","level":3,"score":0.27309998869895935},{"id":"https://openalex.org/C121704057","wikidata":"https://www.wikidata.org/wiki/Q352070","display_name":"Collision","level":2,"score":0.2678000032901764},{"id":"https://openalex.org/C174333608","wikidata":"https://www.wikidata.org/wiki/Q19635","display_name":"Trojan","level":2,"score":0.2628999948501587},{"id":"https://openalex.org/C98763669","wikidata":"https://www.wikidata.org/wiki/Q176645","display_name":"Markov chain","level":2,"score":0.2581999897956848}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/ickg66886.2025.00017","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ickg66886.2025.00017","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE International Conference on Knowledge Graph (ICKG)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.4861297309398651,"display_name":"Climate action","id":"https://metadata.un.org/sdg/13"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":22,"referenced_works":["https://openalex.org/W1988300964","https://openalex.org/W2012549717","https://openalex.org/W2031163547","https://openalex.org/W2093168265","https://openalex.org/W2132111557","https://openalex.org/W2146897752","https://openalex.org/W2510664603","https://openalex.org/W2625814963","https://openalex.org/W2789828921","https://openalex.org/W2906694449","https://openalex.org/W2964069854","https://openalex.org/W2982682021","https://openalex.org/W3037594688","https://openalex.org/W3114378557","https://openalex.org/W4205329374","https://openalex.org/W4249875616","https://openalex.org/W4281743163","https://openalex.org/W4318771342","https://openalex.org/W4385565420","https://openalex.org/W4399121544","https://openalex.org/W4400348418","https://openalex.org/W4408615285"],"related_works":[],"abstract_inverted_index":{"Anomaly":[0],"detection":[1,52,112,167],"in":[2,15,53,145,168],"dynamic":[3],"graphs":[4],"is":[5,159],"essential":[6],"for":[7,49,88,99,163],"identifying":[8],"malicious":[9],"activities,":[10],"fraud,":[11],"and":[12,21,32,46,92,124,134,161],"unexpected":[13],"behaviors":[14],"real-world":[16,110],"systems":[17],"such":[18,120],"as":[19,121],"cybersecurity":[20],"power":[22],"grids.":[23],"However,":[24],"existing":[25],"approaches":[26],"struggle":[27],"with":[28,63,76],"scalability,":[29],"probabilistic":[30,89],"interpretability,":[31],"adaptability":[33],"to":[34,70,103,128,136],"evolving":[35],"traffic":[36],"patterns.":[37],"In":[38],"this":[39],"paper,":[40],"we":[41],"propose":[42],"ADAPTIVE-GRAPHSKETCH,":[43],"a":[44],"lightweight":[45],"scalable":[47],"framework":[48],"real-time":[50],"anomaly":[51,90,166],"streaming":[54,170],"edge":[55,73],"data.":[56],"Our":[57,154],"method":[58],"integrates":[59],"temporal":[60],"multi-tensor":[61],"sketching":[62],"Count-Min":[64],"Sketch":[65],"using":[66,149],"Conservative":[67],"Update":[68],"(CMS-CU)":[69],"compactly":[71],"track":[72],"frequency":[74],"patterns":[75],"bounded":[77],"memory,":[78],"while":[79,140],"mitigating":[80],"hash":[81,152],"collision":[82],"issues.":[83],"We":[84],"incorporate":[85],"Bayesian":[86],"inference":[87],"scoring":[91],"apply":[93],"Exponentially":[94],"Weighted":[95],"Moving":[96],"Average":[97],"(EWMA)":[98],"adaptive":[100],"thresholding":[101],"tuned":[102],"burst":[104],"intensity.":[105],"Extensive":[106],"experiments":[107],"on":[108,132,138],"four":[109],"intrusion":[111],"datasets":[113],"demonstrate":[114],"that":[115,157],"Adaptive-GraphSketch":[116,158],"outperforms":[117],"state-of-the-art":[118],"baselines":[119],"AnoEdge-G/L,":[122],"MIDAS-R,":[123],"F-FADE,":[125],"achieving":[126],"up":[127,135],"6.5%":[129],"AUC":[130],"gain":[131],"CIC-IDS2018":[133],"15.6%":[137],"CIC-DDoS2019,":[139],"processing":[141],"20":[142],"million":[143],"edges":[144],"under":[146],"3.4":[147],"seconds":[148],"only":[150],"10":[151],"functions.":[153],"results":[155],"show":[156],"practical":[160],"effective":[162],"fast,":[164],"accurate":[165],"large-scale":[169],"graphs.":[171]},"counts_by_year":[],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2026-02-27T00:00:00"}