{"id":"https://openalex.org/W4405304850","doi":"https://doi.org/10.1109/tifs.2024.3516570","title":"NMFAD: Neighbor-Aware Mask-Filling Attributed Network Anomaly Detection","display_name":"NMFAD: Neighbor-Aware Mask-Filling Attributed Network Anomaly Detection","publication_year":2024,"publication_date":"2024-12-12","ids":{"openalex":"https://openalex.org/W4405304850","doi":"https://doi.org/10.1109/tifs.2024.3516570"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2024.3516570","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2024.3516570","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5000337879","display_name":"Liang Xi","orcid":"https://orcid.org/0000-0002-2736-829X"},"institutions":[{"id":"https://openalex.org/I100188998","display_name":"Harbin University of Science and Technology","ror":"https://ror.org/04e6y1282","country_code":"CN","type":"education","lineage":["https://openalex.org/I100188998"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Liang Xi","raw_affiliation_strings":["School of Computer Science and Technology, Harbin University of Science and Technology, Harbin, China"],"raw_orcid":"https://orcid.org/0000-0002-2736-829X","affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Harbin University of Science and Technology, Harbin, China","institution_ids":["https://openalex.org/I100188998"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5087759130","display_name":"Runze Li","orcid":"https://orcid.org/0000-0002-1422-3120"},"institutions":[{"id":"https://openalex.org/I100188998","display_name":"Harbin University of Science and Technology","ror":"https://ror.org/04e6y1282","country_code":"CN","type":"education","lineage":["https://openalex.org/I100188998"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Runze Li","raw_affiliation_strings":["School of Computer Science and Technology, Harbin University of Science and Technology, Harbin, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Harbin University of Science and Technology, Harbin, China","institution_ids":["https://openalex.org/I100188998"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5114858732","display_name":"Menghan Li","orcid":"https://orcid.org/0009-0005-1226-6783"},"institutions":[{"id":"https://openalex.org/I100188998","display_name":"Harbin University of Science and Technology","ror":"https://ror.org/04e6y1282","country_code":"CN","type":"education","lineage":["https://openalex.org/I100188998"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Menghan Li","raw_affiliation_strings":["School of Computer Science and Technology, Harbin University of Science and Technology, Harbin, China"],"raw_orcid":"https://orcid.org/0009-0005-1226-6783","affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Harbin University of Science and Technology, Harbin, China","institution_ids":["https://openalex.org/I100188998"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5067942981","display_name":"Dehua Miao","orcid":"https://orcid.org/0009-0006-7793-0654"},"institutions":[{"id":"https://openalex.org/I100188998","display_name":"Harbin University of Science and Technology","ror":"https://ror.org/04e6y1282","country_code":"CN","type":"education","lineage":["https://openalex.org/I100188998"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Dehua Miao","raw_affiliation_strings":["School of Computer Science and Technology, Harbin University of Science and Technology, Harbin, China"],"raw_orcid":"https://orcid.org/0009-0006-7793-0654","affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Harbin University of Science and Technology, Harbin, China","institution_ids":["https://openalex.org/I100188998"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5028393820","display_name":"Ruidong Wang","orcid":"https://orcid.org/0000-0001-5178-2960"},"institutions":[{"id":"https://openalex.org/I135237710","display_name":"Zhejiang Normal University","ror":"https://ror.org/01vevwk45","country_code":"CN","type":"education","lineage":["https://openalex.org/I135237710"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ruidong Wang","raw_affiliation_strings":["School of Computer Science and Technology, Zhejiang Normal University, Jinhua, China"],"raw_orcid":"https://orcid.org/0000-0001-5178-2960","affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Zhejiang Normal University, Jinhua, China","institution_ids":["https://openalex.org/I135237710"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5087770310","display_name":"Zygmunt J. Haas","orcid":"https://orcid.org/0000-0003-4225-7333"},"institutions":[{"id":"https://openalex.org/I162577319","display_name":"The University of Texas at Dallas","ror":"https://ror.org/049emcs32","country_code":"US","type":"education","lineage":["https://openalex.org/I162577319"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Zygmunt J. Haas","raw_affiliation_strings":["Department of Computer Science, The University of Texas at Dallas, Dallas, TX, USA","Department of Computer Science, University of Texas at Dallas, Dallas, TX, U.S"],"raw_orcid":"https://orcid.org/0000-0003-4225-7333","affiliations":[{"raw_affiliation_string":"Department of Computer Science, The University of Texas at Dallas, Dallas, TX, USA","institution_ids":["https://openalex.org/I162577319"]},{"raw_affiliation_string":"Department of Computer Science, University of Texas at Dallas, Dallas, TX, U.S","institution_ids":["https://openalex.org/I162577319"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5000337879"],"corresponding_institution_ids":["https://openalex.org/I100188998"],"apc_list":null,"apc_paid":null,"fwci":1.3241,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":{"value":0.82976434,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":96,"max":98},"biblio":{"volume":"20","issue":null,"first_page":"364","last_page":"374"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.983299970626831,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7005382180213928},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.6150864958763123},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.44538113474845886},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.3244208097457886},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3093492388725281},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.30890119075775146}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7005382180213928},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.6150864958763123},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.44538113474845886},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.3244208097457886},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3093492388725281},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.30890119075775146},{"id":"https://openalex.org/C26873012","wikidata":"https://www.wikidata.org/wiki/Q214781","display_name":"Condensed matter physics","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2024.3516570","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2024.3516570","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2511286102","display_name":null,"funder_award_id":"HZKY20220291","funder_id":"https://openalex.org/F4320336581","funder_display_name":"Chunhui Project Foundation of the Education Department of China"},{"id":"https://openalex.org/G5342023184","display_name":null,"funder_award_id":"LH2022F034","funder_id":"https://openalex.org/F4320323085","funder_display_name":"Natural Science Foundation of Heilongjiang Province"}],"funders":[{"id":"https://openalex.org/F4320323085","display_name":"Natural Science Foundation of Heilongjiang Province","ror":null},{"id":"https://openalex.org/F4320336581","display_name":"Chunhui Project Foundation of the Education Department of China","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":46,"referenced_works":["https://openalex.org/W1995168330","https://openalex.org/W2053186076","https://openalex.org/W2062797058","https://openalex.org/W2122646361","https://openalex.org/W2585247128","https://openalex.org/W2591749048","https://openalex.org/W2622489478","https://openalex.org/W2808409763","https://openalex.org/W2809299793","https://openalex.org/W2891220989","https://openalex.org/W2896049242","https://openalex.org/W2908027240","https://openalex.org/W2914080035","https://openalex.org/W2944250323","https://openalex.org/W2962975498","https://openalex.org/W2963049059","https://openalex.org/W3010920176","https://openalex.org/W3015799890","https://openalex.org/W3023308054","https://openalex.org/W3034122135","https://openalex.org/W3034292309","https://openalex.org/W3035666843","https://openalex.org/W3086725547","https://openalex.org/W3093773625","https://openalex.org/W3129357130","https://openalex.org/W3133518153","https://openalex.org/W3134210100","https://openalex.org/W3201346989","https://openalex.org/W3206604724","https://openalex.org/W4210971508","https://openalex.org/W4221095033","https://openalex.org/W4285066127","https://openalex.org/W4290876361","https://openalex.org/W4311079930","https://openalex.org/W4313156423","https://openalex.org/W4313378981","https://openalex.org/W4320002750","https://openalex.org/W4364856159","https://openalex.org/W4379622917","https://openalex.org/W4385626884","https://openalex.org/W4387872695","https://openalex.org/W6690230747","https://openalex.org/W6699364125","https://openalex.org/W6751494907","https://openalex.org/W6798331393","https://openalex.org/W6810227857"],"related_works":["https://openalex.org/W2806741695","https://openalex.org/W4290647774","https://openalex.org/W3189286258","https://openalex.org/W3207797160","https://openalex.org/W3210364259","https://openalex.org/W4300558037","https://openalex.org/W2667207928","https://openalex.org/W2912112202","https://openalex.org/W4377864969","https://openalex.org/W2033914206"],"abstract_inverted_index":{"As":[0,64],"a":[1,92,145],"widely":[2],"adopted":[3],"protocol":[4,96],"for":[5,103],"anomaly":[6,94],"detection":[7,95],"in":[8,31,82],"attributed":[9,32,104,206],"networks,":[10,33,105],"reconstruction":[11,84,188],"error":[12,189],"prioritizes":[13],"comprehensive":[14],"feature":[15],"extraction":[16],"to":[17,66,107,141,165,179,198],"detect":[18],"anomalies":[19],"over":[20],"interrogating":[21],"the":[22,109,135,151,161,166,174,177,187,199],"differential":[23],"representation":[24],"between":[25,111],"normal":[26,34,52,67,169],"and":[27,36,61,113,131,159],"abnormal":[28,43,69,117,162,181,191],"nodes.":[29,170,192],"Intuitively,":[30],"nodes":[35,44,53,70,118,130,143,153,163,182],"their":[37,49,59,73,123,157],"neighbors":[38,60,74,158],"often":[39],"exhibit":[40],"similarities,":[41],"whereas":[42],"demonstrate":[45,195],"behaviors":[46],"distinct":[47],"from":[48,87,122,156],"neighbors.":[50,124],"Hence,":[51],"can":[54],"be":[55,76],"accurately":[56],"represented":[57,71],"through":[58],"effectively":[62],"reconstructed.":[63],"opposed":[65],"nodes,":[68],"by":[72],"may":[75],"erroneously":[77],"reconstructed":[78,114],"as":[79,183],"normal,":[80,184],"resulting":[81],"increased":[83],"error.":[85],"Leveraging":[86],"this":[88],"observation,":[89],"we":[90,126,149],"propose":[91],"novel":[93],"called":[97],"Neighbor-aware":[98],"Mask-Filling":[99],"Anomaly":[100],"Detection":[101],"(NMFAD)":[102],"aiming":[106],"maximize":[108],"variability":[110],"original":[112],"features":[115],"of":[116,168,176,190],"filled":[119],"with":[120,154],"information":[121],"Specifically,":[125],"utilize":[127],"random-mask":[128],"on":[129],"integrate":[132],"them":[133],"into":[134,144],"backbone":[136],"Graph":[137],"Neural":[138],"Networks":[139],"(GNNs)":[140],"map":[142],"latent":[146],"space.":[147],"Subsequently,":[148],"fill":[150],"masked":[152],"embeddings":[155],"smooth":[160],"closer":[164],"distribution":[167],"This":[171],"optimization":[172],"improves":[173],"likelihood":[175],"decoder":[178],"reconstructing":[180],"thereby":[185],"maximizing":[186],"Experimental":[193],"results":[194],"that,":[196],"compared":[197],"existing":[200],"models,":[201],"NMFAD":[202],"exhibits":[203],"superior":[204],"performance.in":[205],"networks.":[207]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":3}],"updated_date":"2026-05-06T08:25:59.206177","created_date":"2025-10-10T00:00:00"}
