{"id":"https://openalex.org/W2951086007","doi":"https://doi.org/10.1145/3292500.3330946","title":"Fast and Accurate Anomaly Detection in Dynamic Graphs with a Two-Pronged Approach","display_name":"Fast and Accurate Anomaly Detection in Dynamic Graphs with a Two-Pronged Approach","publication_year":2019,"publication_date":"2019-07-25","ids":{"openalex":"https://openalex.org/W2951086007","doi":"https://doi.org/10.1145/3292500.3330946","mag":"2951086007"},"language":"en","primary_location":{"id":"doi:10.1145/3292500.3330946","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3292500.3330946","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3292500.3330946","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 25th ACM SIGKDD International Conference on Knowledge Discovery & Data Mining","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3292500.3330946","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5038730074","display_name":"Minji Yoon","orcid":"https://orcid.org/0000-0003-3693-9127"},"institutions":[{"id":"https://openalex.org/I74973139","display_name":"Carnegie Mellon University","ror":"https://ror.org/05x2bcf33","country_code":"US","type":"education","lineage":["https://openalex.org/I74973139"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Minji Yoon","raw_affiliation_strings":["Carnegie Mellon University, Pittsburgh, PA, USA"],"affiliations":[{"raw_affiliation_string":"Carnegie Mellon University, Pittsburgh, PA, USA","institution_ids":["https://openalex.org/I74973139"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5065675832","display_name":"Bryan Hooi","orcid":"https://orcid.org/0000-0002-5645-1754"},"institutions":[{"id":"https://openalex.org/I165932596","display_name":"National University of Singapore","ror":"https://ror.org/01tgyzw49","country_code":"SG","type":"education","lineage":["https://openalex.org/I165932596"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Bryan Hooi","raw_affiliation_strings":["National University of Singapore, Singapore, Singapore"],"affiliations":[{"raw_affiliation_string":"National University of Singapore, Singapore, Singapore","institution_ids":["https://openalex.org/I165932596"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5028609723","display_name":"Kijung Shin","orcid":"https://orcid.org/0000-0002-2872-1526"},"institutions":[{"id":"https://openalex.org/I157485424","display_name":"Korea Advanced Institute of Science and Technology","ror":"https://ror.org/05apxxy63","country_code":"KR","type":"education","lineage":["https://openalex.org/I157485424"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Kijung Shin","raw_affiliation_strings":["KAIST, Daejeon, South Korea"],"affiliations":[{"raw_affiliation_string":"KAIST, Daejeon, South Korea","institution_ids":["https://openalex.org/I157485424"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5035605036","display_name":"Christos Faloutsos","orcid":"https://orcid.org/0000-0003-2996-9790"},"institutions":[{"id":"https://openalex.org/I74973139","display_name":"Carnegie Mellon University","ror":"https://ror.org/05x2bcf33","country_code":"US","type":"education","lineage":["https://openalex.org/I74973139"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Christos Faloutsos","raw_affiliation_strings":["Carnegie Mellon University, Pittsburgh, PA, USA"],"affiliations":[{"raw_affiliation_string":"Carnegie Mellon University, Pittsburgh, PA, USA","institution_ids":["https://openalex.org/I74973139"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5038730074"],"corresponding_institution_ids":["https://openalex.org/I74973139"],"apc_list":null,"apc_paid":null,"fwci":6.6236,"has_fulltext":true,"cited_by_count":85,"citation_normalized_percentile":{"value":0.97549313,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"647","last_page":"657"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10064","display_name":"Complex Network Analysis Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/3109","display_name":"Statistical and Nonlinear Physics"},"field":{"id":"https://openalex.org/fields/31","display_name":"Physics and Astronomy"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10064","display_name":"Complex Network Analysis Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/3109","display_name":"Statistical and Nonlinear Physics"},"field":{"id":"https://openalex.org/fields/31","display_name":"Physics and Astronomy"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9945999979972839,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7554765343666077},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.6684014797210693},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.6055771708488464},{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.48952922224998474},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.439682275056839},{"id":"https://openalex.org/keywords/laptop","display_name":"Laptop","score":0.42379286885261536},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.3835565149784088},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.37103646993637085},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.3362414240837097},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.18700635433197021}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7554765343666077},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.6684014797210693},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.6055771708488464},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.48952922224998474},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.439682275056839},{"id":"https://openalex.org/C2780008327","wikidata":"https://www.wikidata.org/wiki/Q3962","display_name":"Laptop","level":2,"score":0.42379286885261536},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3835565149784088},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.37103646993637085},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.3362414240837097},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.18700635433197021},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.0},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3292500.3330946","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3292500.3330946","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3292500.3330946","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 25th ACM SIGKDD International Conference on Knowledge Discovery & Data Mining","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3292500.3330946","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3292500.3330946","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3292500.3330946","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 25th ACM SIGKDD International Conference on Knowledge Discovery & Data Mining","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1763277275","display_name":"TWC: Medium: Collaborative: Know Thy Enemy: Data Mining Meets Networks for Understanding Web-Based Malware Dissemination","funder_award_id":"1314632","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G3116621514","display_name":"III: Medium: Collaborative Research: Collective Opinion Fraud Detection: Identifying and Integrating Cues from Language, Behavior, and Networks","funder_award_id":"1408924","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G3968667353","display_name":null,"funder_award_id":"IIS-1408924","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G8733502935","display_name":null,"funder_award_id":"CNS-1314632 and IIS-1408924","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G900395923","display_name":null,"funder_award_id":"CNS-1314632","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2951086007.pdf","grobid_xml":"https://content.openalex.org/works/W2951086007.grobid-xml"},"referenced_works_count":29,"referenced_works":["https://openalex.org/W1492581097","https://openalex.org/W1538524459","https://openalex.org/W1578099820","https://openalex.org/W1854214752","https://openalex.org/W2037360998","https://openalex.org/W2039976898","https://openalex.org/W2061901927","https://openalex.org/W2072328209","https://openalex.org/W2089554624","https://openalex.org/W2112278052","https://openalex.org/W2133591726","https://openalex.org/W2134008243","https://openalex.org/W2138621811","https://openalex.org/W2149169025","https://openalex.org/W2163557584","https://openalex.org/W2339085491","https://openalex.org/W2398784698","https://openalex.org/W2402531259","https://openalex.org/W2473813716","https://openalex.org/W2510664603","https://openalex.org/W2625814963","https://openalex.org/W2729780524","https://openalex.org/W2730363704","https://openalex.org/W2776174348","https://openalex.org/W2784511520","https://openalex.org/W2809409545","https://openalex.org/W2906694449","https://openalex.org/W2963553269","https://openalex.org/W3049667020"],"related_works":["https://openalex.org/W3153292769","https://openalex.org/W2045444909","https://openalex.org/W1516398359","https://openalex.org/W1901656956","https://openalex.org/W2990805456","https://openalex.org/W2941659365","https://openalex.org/W4239210160","https://openalex.org/W2376300433","https://openalex.org/W4242605858","https://openalex.org/W2495255596"],"abstract_inverted_index":{"Given":[0],"a":[1,65,84,170],"dynamic":[2,61],"graph":[3],"stream,":[4],"how":[5],"can":[6,27],"we":[7,28,51],"detect":[8,95],"the":[9,30,41,77,99,110,131,154,159,181],"sudden":[10,96,120,127],"appearance":[11],"of":[12,23,32,79,83,101,118,156,164,180],"anomalous":[13,42],"patterns,":[14],"such":[15],"as":[16],"link":[17],"spam,":[18],"follower":[19],"boosting,":[20],"or":[21,143],"denial":[22],"service":[24],"attacks?":[25],"Additionally,":[26],"categorize":[29],"types":[31,117],"anomalies":[33],"that":[34,109],"occur":[35],"in":[36,60,98,153,158],"practice,":[37],"and":[38,107,126,137,173],"theoretically":[39,106],"analyze":[40],"signs":[43],"arising":[44],"from":[45],"each":[46],"type?":[47],"In":[48],"this":[49],"work,":[50],"propose":[52],"AnomRank,":[53],"an":[54,124],"online":[55],"algorithm":[56],"for":[57,72],"anomaly":[58],"detection":[59],"graphs.":[62],"AnomRank":[63,133],"uses":[64],"two-pronged":[66,111,182],"approach":[67,112],"defining":[68],"two":[69,115],"novel":[70],"metrics":[71],"anomalousness.":[73],"Each":[74],"metric":[75],"tracks":[76],"derivatives":[78],"its":[80],"own":[81],"version":[82],"'node":[85],"score'":[86],"(or":[87],"node":[88],"importance)":[89],"function.":[90],"This":[91],"allows":[92],"us":[93],"to":[94,130,140],"changes":[97,122,129],"importance":[100],"any":[102],"node.":[103],"We":[104],"show":[105],"experimentally":[108],"successfully":[113],"detects":[114],"common":[116],"anomalies:":[119],"weight":[121],"along":[123],"edge,":[125],"structural":[128],"graph.":[132],"is":[134],"(a)":[135],"Fast":[136],"Accurate:":[138],"up":[139],"49.5x":[141],"faster":[142],"35%":[144],"more":[145],"accurate":[146],"than":[147],"state-of-the-art":[148],"methods,":[149],"(b)":[150],"Scalable:":[151],"linear":[152],"number":[155],"edges":[157,165],"input":[160],"graph,":[161],"processing":[162],"millions":[163],"within":[166],"2":[167],"seconds":[168],"on":[169],"stock":[171],"laptop/desktop,":[172],"(c)":[174],"Theoretically":[175],"Sound:":[176],"providing":[177],"theoretical":[178],"guarantees":[179],"approach.":[183]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":9},{"year":2024,"cited_by_count":17},{"year":2023,"cited_by_count":10},{"year":2022,"cited_by_count":19},{"year":2021,"cited_by_count":16},{"year":2020,"cited_by_count":10},{"year":2019,"cited_by_count":1}],"updated_date":"2026-04-21T08:09:41.155169","created_date":"2025-10-10T00:00:00"}