{"id":"https://openalex.org/W4411640158","doi":"https://doi.org/10.1109/tsc.2025.3583241","title":"<i>KeAD:</i> <i>K</i>nowledge-<i>e</i>nhanced Graph Attention Network for Accurate <i>A</i>nomaly <i>D</i>etection","display_name":"<i>KeAD:</i> <i>K</i>nowledge-<i>e</i>nhanced Graph Attention Network for Accurate <i>A</i>nomaly <i>D</i>etection","publication_year":2025,"publication_date":"2025-06-25","ids":{"openalex":"https://openalex.org/W4411640158","doi":"https://doi.org/10.1109/tsc.2025.3583241"},"language":"en","primary_location":{"id":"doi:10.1109/tsc.2025.3583241","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tsc.2025.3583241","pdf_url":null,"source":{"id":"https://openalex.org/S204223317","display_name":"IEEE Transactions on Services Computing","issn_l":"1939-1374","issn":["1939-1374","2372-0204"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Services Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://hal.science/hal-05480343","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100421524","display_name":"Yi Li","orcid":"https://orcid.org/0000-0002-4690-8757"},"institutions":[{"id":"https://openalex.org/I3125743391","display_name":"China University of Geosciences (Beijing)","ror":"https://ror.org/04q6c7p66","country_code":"CN","type":"education","lineage":["https://openalex.org/I3125743391"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yi Li","raw_affiliation_strings":["School of Information Engineering, China University of Geosciences, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-4690-8757","affiliations":[{"raw_affiliation_string":"School of Information Engineering, China University of Geosciences, Beijing, China","institution_ids":["https://openalex.org/I3125743391"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5052234427","display_name":"Zhangbing Zhou","orcid":"https://orcid.org/0000-0002-3195-2253"},"institutions":[{"id":"https://openalex.org/I3125743391","display_name":"China University of Geosciences (Beijing)","ror":"https://ror.org/04q6c7p66","country_code":"CN","type":"education","lineage":["https://openalex.org/I3125743391"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhangbing Zhou","raw_affiliation_strings":["State Key Laboratory of Geological Processes and Mineral Resources, School of Information Engineering, and Frontiers Science Center for Deep-Time Digital Earth, China University of Geosciences, Beijing, China","School of Information Engineering, China University of Geosciences, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-3195-2253","affiliations":[{"raw_affiliation_string":"State Key Laboratory of Geological Processes and Mineral Resources, School of Information Engineering, and Frontiers Science Center for Deep-Time Digital Earth, China University of Geosciences, Beijing, China","institution_ids":["https://openalex.org/I3125743391"]},{"raw_affiliation_string":"School of Information Engineering, China University of Geosciences, Beijing, China","institution_ids":["https://openalex.org/I3125743391"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100525934","display_name":"Pu Sun","orcid":"https://orcid.org/0009-0008-8105-3804"},"institutions":[{"id":"https://openalex.org/I84218800","display_name":"University of California, Davis","ror":"https://ror.org/05rrcem69","country_code":"US","type":"education","lineage":["https://openalex.org/I84218800"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Pu Sun","raw_affiliation_strings":["College of Computer Science and Engineering, University of California, Davis, CA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Computer Science and Engineering, University of California, Davis, CA, USA","institution_ids":["https://openalex.org/I84218800"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5055284175","display_name":"Shuiguang Deng","orcid":"https://orcid.org/0000-0001-5015-6095"},"institutions":[{"id":"https://openalex.org/I168879160","display_name":"Zhejiang University of Science and Technology","ror":"https://ror.org/05mx0wr29","country_code":"CN","type":"education","lineage":["https://openalex.org/I168879160"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shuiguang Deng","raw_affiliation_strings":["College of Computer Science and Technology, Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0001-5015-6095","affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I168879160"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5077100366","display_name":"Xiao Sun","orcid":"https://orcid.org/0000-0001-7045-0187"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiao Sun","raw_affiliation_strings":["Department of Automation, National Engineering Laboratory for E-Commerce Technologies, Tsinghua University, Beijing, China","National Engineering Laboratory for E-Commerce Technologies, Department of Automation, Tsinghua University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-7045-0187","affiliations":[{"raw_affiliation_string":"Department of Automation, National Engineering Laboratory for E-Commerce Technologies, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]},{"raw_affiliation_string":"National Engineering Laboratory for E-Commerce Technologies, Department of Automation, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5047225060","display_name":"Xiao Xue","orcid":"https://orcid.org/0000-0001-5396-3909"},"institutions":[{"id":"https://openalex.org/I162868743","display_name":"Tianjin University","ror":"https://ror.org/012tb2g32","country_code":"CN","type":"education","lineage":["https://openalex.org/I162868743"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiao Xue","raw_affiliation_strings":["College of Intelligence and Computing, Tianjin University, Tianjin, China"],"raw_orcid":"https://orcid.org/0000-0001-5396-3909","affiliations":[{"raw_affiliation_string":"College of Intelligence and Computing, Tianjin University, Tianjin, China","institution_ids":["https://openalex.org/I162868743"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5071740867","display_name":"Sami Yangui","orcid":"https://orcid.org/0000-0001-9756-642X"},"institutions":[{"id":"https://openalex.org/I1294671590","display_name":"Centre National de la Recherche Scientifique","ror":"https://ror.org/02feahw73","country_code":"FR","type":"government","lineage":["https://openalex.org/I1294671590"]},{"id":"https://openalex.org/I17866349","display_name":"Universit\u00e9 F\u00e9d\u00e9rale de Toulouse Midi-Pyr\u00e9n\u00e9es","ror":"https://ror.org/004raaa70","country_code":"FR","type":"education","lineage":["https://openalex.org/I17866349"]},{"id":"https://openalex.org/I190497903","display_name":"Laboratoire d'Analyse et d'Architecture des Syst\u00e8mes","ror":"https://ror.org/03vcm6439","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I1294671590","https://openalex.org/I1294671590","https://openalex.org/I190497903","https://openalex.org/I193033237","https://openalex.org/I196454796","https://openalex.org/I205747304","https://openalex.org/I4210095849","https://openalex.org/I4210152422","https://openalex.org/I4210159245","https://openalex.org/I4405258862","https://openalex.org/I4405259414"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Sami Yangui","raw_affiliation_strings":["LAAS-CNRS, University of Toulouse, Toulouse, France"],"raw_orcid":"https://orcid.org/0000-0001-9756-642X","affiliations":[{"raw_affiliation_string":"LAAS-CNRS, University of Toulouse, Toulouse, France","institution_ids":["https://openalex.org/I1294671590","https://openalex.org/I17866349","https://openalex.org/I190497903"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5084851123","display_name":"Walid Gaaloul","orcid":"https://orcid.org/0000-0003-0451-532X"},"institutions":[{"id":"https://openalex.org/I4210145102","display_name":"Institut Polytechnique de Paris","ror":"https://ror.org/042tfbd02","country_code":"FR","type":"education","lineage":["https://openalex.org/I4210145102"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Walid Gaaloul","raw_affiliation_strings":["SAMOVAR, T&#x00E9;l&#x00E9;com SudParis, Institut Polytechnique de Paris, Palaiseau, France"],"raw_orcid":"https://orcid.org/0000-0003-0451-532X","affiliations":[{"raw_affiliation_string":"SAMOVAR, T&#x00E9;l&#x00E9;com SudParis, Institut Polytechnique de Paris, Palaiseau, France","institution_ids":["https://openalex.org/I4210145102"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":9,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.5399,"has_fulltext":true,"cited_by_count":2,"citation_normalized_percentile":{"value":0.90211384,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":91,"max":97},"biblio":{"volume":"18","issue":"4","first_page":"2172","last_page":"2187"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9843000173568726,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9722999930381775,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7954823970794678},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.6192972660064697},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.48516327142715454},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3716545104980469},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.30020779371261597}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7954823970794678},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.6192972660064697},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.48516327142715454},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3716545104980469},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.30020779371261597}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tsc.2025.3583241","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tsc.2025.3583241","pdf_url":null,"source":{"id":"https://openalex.org/S204223317","display_name":"IEEE Transactions on Services Computing","issn_l":"1939-1374","issn":["1939-1374","2372-0204"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Services Computing","raw_type":"journal-article"},{"id":"pmh:oai:HAL:hal-05480343v1","is_oa":true,"landing_page_url":"https://hal.science/hal-05480343","pdf_url":null,"source":{"id":"https://openalex.org/S4306402512","display_name":"HAL (Le Centre pour la Communication Scientifique Directe)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1294671590","host_organization_name":"Centre National de la Recherche Scientifique","host_organization_lineage":["https://openalex.org/I1294671590"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Transactions on Services Computing, 2025, 18 (4), pp.2172-2187. &#x27E8;10.1109/TSC.2025.3583241&#x27E9;","raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":{"id":"pmh:oai:HAL:hal-05480343v1","is_oa":true,"landing_page_url":"https://hal.science/hal-05480343","pdf_url":null,"source":{"id":"https://openalex.org/S4306402512","display_name":"HAL (Le Centre pour la Communication Scientifique Directe)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1294671590","host_organization_name":"Centre National de la Recherche Scientifique","host_organization_lineage":["https://openalex.org/I1294671590"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Transactions on Services Computing, 2025, 18 (4), pp.2172-2187. &#x27E8;10.1109/TSC.2025.3583241&#x27E9;","raw_type":"info:eu-repo/semantics/article"},"sustainable_development_goals":[{"display_name":"Climate action","id":"https://metadata.un.org/sdg/13","score":0.41999998688697815}],"awards":[{"id":"https://openalex.org/G2380642051","display_name":null,"funder_award_id":"62402460","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G2750634574","display_name":null,"funder_award_id":"2652023001","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G3887259218","display_name":null,"funder_award_id":"DD20230139","funder_id":"https://openalex.org/F4320334926","funder_display_name":"China Geological Survey"},{"id":"https://openalex.org/G4501397874","display_name":null,"funder_award_id":"2652023001","funder_id":"https://openalex.org/F4320335787","funder_display_name":"Fundamental Research Funds for the Central Universities"},{"id":"https://openalex.org/G5880113424","display_name":null,"funder_award_id":"2024ZD1001900","funder_id":"https://openalex.org/F4320329860","funder_display_name":"National Science and Technology Major Project"},{"id":"https://openalex.org/G6778157810","display_name":null,"funder_award_id":"62372420","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8658801957","display_name":null,"funder_award_id":"2652023063","funder_id":"https://openalex.org/F4320335787","funder_display_name":"Fundamental Research Funds for the Central Universities"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320329860","display_name":"National Science and Technology Major Project","ror":null},{"id":"https://openalex.org/F4320334926","display_name":"China Geological Survey","ror":"https://ror.org/04wtq2305"},{"id":"https://openalex.org/F4320335787","display_name":"Fundamental Research Funds for the Central Universities","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":45,"referenced_works":["https://openalex.org/W2293378006","https://openalex.org/W2604247107","https://openalex.org/W2768947629","https://openalex.org/W2786827964","https://openalex.org/W2808535700","https://openalex.org/W2904832339","https://openalex.org/W2911200746","https://openalex.org/W2949848919","https://openalex.org/W2950361482","https://openalex.org/W2962736999","https://openalex.org/W2987793235","https://openalex.org/W3004207920","https://openalex.org/W3025035827","https://openalex.org/W3035630868","https://openalex.org/W3080253043","https://openalex.org/W3080922200","https://openalex.org/W3081497074","https://openalex.org/W3128634608","https://openalex.org/W3158304688","https://openalex.org/W3166888304","https://openalex.org/W3169450514","https://openalex.org/W3170937175","https://openalex.org/W3171105608","https://openalex.org/W3178367256","https://openalex.org/W3184127157","https://openalex.org/W3190748826","https://openalex.org/W3213239025","https://openalex.org/W3213388407","https://openalex.org/W3215290057","https://openalex.org/W4205222700","https://openalex.org/W4206118545","https://openalex.org/W4224317073","https://openalex.org/W4283318673","https://openalex.org/W4290943650","https://openalex.org/W4312553738","https://openalex.org/W4361852364","https://openalex.org/W4367046803","https://openalex.org/W4378647935","https://openalex.org/W4382119071","https://openalex.org/W4383218913","https://openalex.org/W6607543680","https://openalex.org/W6637806248","https://openalex.org/W6748102297","https://openalex.org/W6775788394","https://openalex.org/W6802061597"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"Anomaly":[0,109],"detection":[1,73,200],"has":[2],"emerged":[3],"as":[4,67,95,152],"one":[5],"of":[6,25,55,147,198],"the":[7,144,193],"core":[8],"research":[9],"topics":[10],"to":[11,41,47,61,124,142],"support":[12],"workflow":[13],"applications":[14],"across":[15],"various":[16],"domains.":[17],"To":[18,98],"differentiate":[19],"anomalies":[20],"from":[21,64,164],"underlying":[22],"normal":[23],"patterns":[24],"workflows,":[26,158],"Graph":[27],"Neural":[28],"Networks":[29],"(GNNs)":[30],"models":[31,36],"have":[32,83],"been":[33],"introduced.":[34],"These":[35],"leverage":[37],"time":[38],"series":[39],"data":[40],"construct":[42],"graph":[43,107,116,136],"structures,":[44],"in":[45,157,168,196],"order":[46],"explicitly":[48],"capture":[49],"task":[50],"dependencies":[51,127],"among":[52],"industrial":[53],"Internet":[54],"Things":[56],"(IoT)":[57],"devices,":[58],"and":[59],"thus,":[60],"identify":[62],"deviations":[63,163],"predicted":[65,166],"behaviours":[66,146,167],"anomalies.":[68],"However,":[69],"existing":[70],"forecasting-based":[71],"anomaly":[72,199],"methods":[74],"may":[75],"not":[76],"accurately":[77],"detect":[78],"certain":[79],"anomalies,":[80],"since":[81],"they":[82],"seldom":[84],"considered":[85],"valuable":[86],"information":[87],"uncovered":[88],"by":[89,120,155,161],"historical":[90],"sensory":[91],"data,":[92],"but":[93],"presented":[94],"domain":[96],"knowledge.":[97,172],"address":[99],"this":[100,102],"limitation,":[101],"paper":[103],"proposes":[104],"a":[105,114,134],"Knowledge-enhanced":[106],"attention-based":[108,137],"Detection":[110],"(KeAD)":[111],"method.":[112],"Specifically,":[113],"knowledge-enhanced":[115,135],"structure":[117],"is":[118,140,176],"constructed":[119],"incorporating":[121],"domain-specific":[122,171],"knowledge":[123],"represent":[125],"spatio-temporal":[126],"between":[128],"IoT":[129,148],"devices.":[130,149],"Based":[131],"on":[132,183],"which,":[133],"forecasting":[138],"network":[139],"developed":[141],"predict":[143],"future":[145],"Anomalies,":[150],"such":[151],"those":[153],"caused":[154],"cyber-attacks":[156],"are":[159],"detected":[160],"analyzing":[162],"these":[165],"conjunction":[169],"with":[170,179],"A":[173],"case":[174],"study":[175],"presented,":[177],"along":[178],"extensive":[180],"experiments":[181],"conducted":[182],"publicly":[184],"available":[185],"datasets.":[186],"Evaluation":[187],"results":[188],"demonstrate":[189],"that":[190],"KeAD":[191],"outperforms":[192],"state-of-the-art":[194],"techniques":[195],"terms":[197],"accuracy.":[201]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1}],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2025-06-26T00:00:00"}