{"id":"https://openalex.org/W3152507776","doi":"https://doi.org/10.1145/3442381.3449922","title":"Few-shot Network Anomaly Detection via Cross-network Meta-learning","display_name":"Few-shot Network Anomaly Detection via Cross-network Meta-learning","publication_year":2021,"publication_date":"2021-04-19","ids":{"openalex":"https://openalex.org/W3152507776","doi":"https://doi.org/10.1145/3442381.3449922","mag":"3152507776"},"language":"en","primary_location":{"id":"doi:10.1145/3442381.3449922","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3442381.3449922","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Web Conference 2021","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3442381.3449922","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5044455276","display_name":"Kaize Ding","orcid":"https://orcid.org/0000-0001-6684-6752"},"institutions":[{"id":"https://openalex.org/I55732556","display_name":"Arizona State University","ror":"https://ror.org/03efmqc40","country_code":"US","type":"education","lineage":["https://openalex.org/I55732556"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Kaize Ding","raw_affiliation_strings":["Arizona State University, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Arizona State University, USA","institution_ids":["https://openalex.org/I55732556"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102706243","display_name":"Qinghai Zhou","orcid":"https://orcid.org/0000-0002-2571-5796"},"institutions":[{"id":"https://openalex.org/I157725225","display_name":"University of Illinois Urbana-Champaign","ror":"https://ror.org/047426m28","country_code":"US","type":"education","lineage":["https://openalex.org/I157725225"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Qinghai Zhou","raw_affiliation_strings":["University of Illinois Urbana-Champaign, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Illinois Urbana-Champaign, USA","institution_ids":["https://openalex.org/I157725225"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068043486","display_name":"Hanghang Tong","orcid":"https://orcid.org/0000-0003-4405-3887"},"institutions":[{"id":"https://openalex.org/I157725225","display_name":"University of Illinois Urbana-Champaign","ror":"https://ror.org/047426m28","country_code":"US","type":"education","lineage":["https://openalex.org/I157725225"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Hanghang Tong","raw_affiliation_strings":["University of Illinois Urbana-Champaign, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Illinois Urbana-Champaign, USA","institution_ids":["https://openalex.org/I157725225"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100338946","display_name":"Huan Liu","orcid":"https://orcid.org/0000-0002-3264-7904"},"institutions":[{"id":"https://openalex.org/I55732556","display_name":"Arizona State University","ror":"https://ror.org/03efmqc40","country_code":"US","type":"education","lineage":["https://openalex.org/I55732556"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Huan Liu","raw_affiliation_strings":["Arizona State University, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Arizona State University, USA","institution_ids":["https://openalex.org/I55732556"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5044455276"],"corresponding_institution_ids":["https://openalex.org/I55732556"],"apc_list":null,"apc_paid":null,"fwci":11.4736,"has_fulltext":false,"cited_by_count":122,"citation_normalized_percentile":{"value":0.98759609,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":99,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"2448","last_page":"2456"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9955000281333923,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11819","display_name":"Data-Driven Disease Surveillance","score":0.982200026512146,"subfield":{"id":"https://openalex.org/subfields/2713","display_name":"Epidemiology"},"field":{"id":"https://openalex.org/fields/27","display_name":"Medicine"},"domain":{"id":"https://openalex.org/domains/4","display_name":"Health Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.8136416077613831},{"id":"https://openalex.org/keywords/leverage","display_name":"Leverage (statistics)","score":0.7717902660369873},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7263211607933044},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.5034276843070984},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.45631325244903564},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.4462830722332001},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.44156414270401},{"id":"https://openalex.org/keywords/ranging","display_name":"Ranging","score":0.44048500061035156},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.44033530354499817},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.22177669405937195}],"concepts":[{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.8136416077613831},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.7717902660369873},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7263211607933044},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5034276843070984},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.45631325244903564},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4462830722332001},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.44156414270401},{"id":"https://openalex.org/C115051666","wikidata":"https://www.wikidata.org/wiki/Q6522493","display_name":"Ranging","level":2,"score":0.44048500061035156},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.44033530354499817},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.22177669405937195},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.0},{"id":"https://openalex.org/C26873012","wikidata":"https://www.wikidata.org/wiki/Q214781","display_name":"Condensed matter physics","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3442381.3449922","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3442381.3449922","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Web Conference 2021","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3442381.3449922","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3442381.3449922","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Web Conference 2021","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":49,"referenced_works":["https://openalex.org/W164607750","https://openalex.org/W1774848501","https://openalex.org/W2022322548","https://openalex.org/W2033083678","https://openalex.org/W2034572462","https://openalex.org/W2064058256","https://openalex.org/W2089554624","https://openalex.org/W2116405614","https://openalex.org/W2129117219","https://openalex.org/W2134008243","https://openalex.org/W2137825550","https://openalex.org/W2138621090","https://openalex.org/W2144182447","https://openalex.org/W2402531259","https://openalex.org/W2415243320","https://openalex.org/W2472819217","https://openalex.org/W2624431344","https://openalex.org/W2743138268","https://openalex.org/W2809503262","https://openalex.org/W2906836970","https://openalex.org/W2914953695","https://openalex.org/W2944250323","https://openalex.org/W2949848919","https://openalex.org/W2951094201","https://openalex.org/W2962711740","https://openalex.org/W2963341924","https://openalex.org/W2963521729","https://openalex.org/W2963893312","https://openalex.org/W2965949912","https://openalex.org/W2966149470","https://openalex.org/W2970127247","https://openalex.org/W2983576094","https://openalex.org/W2984580262","https://openalex.org/W2994598354","https://openalex.org/W2997964288","https://openalex.org/W3008270663","https://openalex.org/W3009901425","https://openalex.org/W3034213836","https://openalex.org/W3046983129","https://openalex.org/W3068123808","https://openalex.org/W3093649180","https://openalex.org/W3093957844","https://openalex.org/W3094624443","https://openalex.org/W3098259638","https://openalex.org/W3099064659","https://openalex.org/W3104667978","https://openalex.org/W3128358475","https://openalex.org/W4254182148","https://openalex.org/W4293159471"],"related_works":["https://openalex.org/W2991592210","https://openalex.org/W2949848919","https://openalex.org/W2042251007","https://openalex.org/W2984111956","https://openalex.org/W2065643612","https://openalex.org/W2110365568","https://openalex.org/W4311571903","https://openalex.org/W2130317780","https://openalex.org/W2063729131","https://openalex.org/W2787947370"],"abstract_inverted_index":{"Network":[0],"anomaly":[1,7,99,157,212,236],"detection,":[2,8],"also":[3,108],"known":[4],"as":[5,120],"graph":[6,166],"aims":[9],"to":[10,40,45,67,76,91,110,132,208],"find":[11],"network":[12,42,98,156,211,235],"elements":[13],"(e.g.,":[14],"nodes,":[15],"edges,":[16],"subgraphs)":[17],"with":[18,202],"significantly":[19],"different":[20],"behaviors":[21],"from":[22,37,116,217],"the":[23,46,60,77,83,117,122,128,152,199,224,227],"vast":[24],"majority.":[25],"It":[26],"has":[27],"a":[28,32,139,162,177,194,203],"profound":[29],"impact":[30],"in":[31,55,147],"variety":[33],"of":[34,79,85,121,127,144,154,165,180,226],"applications":[35],"ranging":[36],"finance,":[38],"healthcare":[39],"social":[41],"analysis.":[43],"Due":[44],"unbearable":[47],"labeling":[48],"cost,":[49],"existing":[50,129],"methods":[51],"are":[52,107],"predominately":[53],"developed":[54],"an":[56],"unsupervised":[57],"manner.":[58],"Nonetheless,":[59],"anomalies":[61,84,106,182],"they":[62],"identify":[63],"may":[64],"turn":[65],"out":[66],"be":[68,111],"data":[69,73],"noises":[70],"or":[71,232],"uninteresting":[72],"instances":[74],"due":[75],"lack":[78],"prior":[80],"knowledge":[81],"on":[82,113,138,193,230],"interest.":[86],"Hence,":[87],"it":[88],"is":[89],"critical":[90],"investigate":[92],"and":[93,135,190,196],"develop":[94],"few-shot":[95,155,210,231],"learning":[96],"for":[97,183],"detection.":[100,237],"In":[101],"real-world":[102],"scenarios,":[103],"few":[104],"labeled":[105,181],"easy":[109],"accessed":[112],"similar":[114],"networks":[115,168],"same":[118],"domain":[119],"target":[123],"network,":[124],"while":[125],"most":[126],"works":[130],"omit":[131],"leverage":[133,176],"them":[134],"merely":[136],"focus":[137],"single":[140],"network.":[141],"Taking":[142],"advantage":[143],"this":[145,148],"potential,":[146],"work,":[149],"we":[150],"tackle":[151],"problem":[153],"detection":[158,213],"by":[159,214],"(1)":[160],"proposing":[161],"new":[163,204],"family":[164],"neural":[167],"\u2013":[169],"Graph":[170],"Deviation":[171],"Networks":[172],"(GDN)":[173],"that":[174],"can":[175],"small":[178],"number":[179],"enforcing":[184],"statistically":[185],"significant":[186],"deviations":[187],"between":[188],"abnormal":[189],"normal":[191],"nodes":[192],"network;":[195],"(2)":[197],"equipping":[198],"proposed":[200,228],"GDN":[201],"cross-network":[205],"meta-learning":[206],"algorithm":[207],"realize":[209],"transferring":[215],"meta-knowledge":[216],"multiple":[218],"auxiliary":[219],"networks.":[220],"Extensive":[221],"evaluations":[222],"demonstrate":[223],"efficacy":[225],"approach":[229],"even":[233],"one-shot":[234]},"counts_by_year":[{"year":2026,"cited_by_count":9},{"year":2025,"cited_by_count":31},{"year":2024,"cited_by_count":29},{"year":2023,"cited_by_count":19},{"year":2022,"cited_by_count":23},{"year":2021,"cited_by_count":11}],"updated_date":"2026-06-03T09:05:47.796612","created_date":"2025-10-10T00:00:00"}