{"id":"https://openalex.org/W3209441117","doi":"https://doi.org/10.1145/3459637.3482195","title":"Subtractive Aggregation for Attributed Network Anomaly Detection","display_name":"Subtractive Aggregation for Attributed Network Anomaly Detection","publication_year":2021,"publication_date":"2021-10-26","ids":{"openalex":"https://openalex.org/W3209441117","doi":"https://doi.org/10.1145/3459637.3482195","mag":"3209441117"},"language":"en","primary_location":{"id":"doi:10.1145/3459637.3482195","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3459637.3482195","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 30th ACM International Conference on Information &amp; Knowledge Management","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5104153557","display_name":"Shuang Zhou","orcid":null},"institutions":[{"id":"https://openalex.org/I14243506","display_name":"Hong Kong Polytechnic University","ror":"https://ror.org/0030zas98","country_code":"HK","type":"education","lineage":["https://openalex.org/I14243506"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Shuang Zhou","raw_affiliation_strings":["The Hong Kong Polytechnic University, Hong Kong, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Hong Kong Polytechnic University, Hong Kong, China","institution_ids":["https://openalex.org/I14243506"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5043697901","display_name":"Qiaoyu Tan","orcid":"https://orcid.org/0000-0001-8999-968X"},"institutions":[{"id":"https://openalex.org/I14243506","display_name":"Hong Kong Polytechnic University","ror":"https://ror.org/0030zas98","country_code":"HK","type":"education","lineage":["https://openalex.org/I14243506"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Qiaoyu Tan","raw_affiliation_strings":["The Hong Kong Polytechnic University, Hong Kong, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Hong Kong Polytechnic University, Hong Kong, China","institution_ids":["https://openalex.org/I14243506"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100923882","display_name":"Zhiming Xu","orcid":null},"institutions":[{"id":"https://openalex.org/I14243506","display_name":"Hong Kong Polytechnic University","ror":"https://ror.org/0030zas98","country_code":"HK","type":"education","lineage":["https://openalex.org/I14243506"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Zhiming Xu","raw_affiliation_strings":["The Hong Kong Polytechnic University, Hong Kong, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Hong Kong Polytechnic University, Hong Kong, China","institution_ids":["https://openalex.org/I14243506"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5055037545","display_name":"Xiao Huang","orcid":"https://orcid.org/0000-0002-3867-900X"},"institutions":[{"id":"https://openalex.org/I14243506","display_name":"Hong Kong Polytechnic University","ror":"https://ror.org/0030zas98","country_code":"HK","type":"education","lineage":["https://openalex.org/I14243506"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Xiao Huang","raw_affiliation_strings":["The Hong Kong Polytechnic University, Hong Kong, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Hong Kong Polytechnic University, Hong Kong, China","institution_ids":["https://openalex.org/I14243506"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5043016512","display_name":"Fu-Lai Chung","orcid":"https://orcid.org/0000-0001-5294-8168"},"institutions":[{"id":"https://openalex.org/I14243506","display_name":"Hong Kong Polytechnic University","ror":"https://ror.org/0030zas98","country_code":"HK","type":"education","lineage":["https://openalex.org/I14243506"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Fu-lai Chung","raw_affiliation_strings":["The Hong Kong Polytechnic University, Hong Kong, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Hong Kong Polytechnic University, Hong Kong, China","institution_ids":["https://openalex.org/I14243506"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I14243506"],"apc_list":null,"apc_paid":null,"fwci":4.3408,"has_fulltext":false,"cited_by_count":35,"citation_normalized_percentile":{"value":0.96006067,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"3672","last_page":"3676"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.9986000061035156,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.8734391927719116},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6772299408912659},{"id":"https://openalex.org/keywords/abnormality","display_name":"Abnormality","score":0.6542588472366333},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.6534463763237},{"id":"https://openalex.org/keywords/subtractive-color","display_name":"Subtractive color","score":0.5970224738121033},{"id":"https://openalex.org/keywords/hypersphere","display_name":"Hypersphere","score":0.5734696388244629},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4471365809440613},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4036983847618103},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.3527964651584625},{"id":"https://openalex.org/keywords/physics","display_name":"Physics","score":0.07137253880500793}],"concepts":[{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.8734391927719116},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6772299408912659},{"id":"https://openalex.org/C50965678","wikidata":"https://www.wikidata.org/wiki/Q2724302","display_name":"Abnormality","level":2,"score":0.6542588472366333},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.6534463763237},{"id":"https://openalex.org/C150799807","wikidata":"https://www.wikidata.org/wiki/Q374081","display_name":"Subtractive color","level":2,"score":0.5970224738121033},{"id":"https://openalex.org/C2776562905","wikidata":"https://www.wikidata.org/wiki/Q306610","display_name":"Hypersphere","level":2,"score":0.5734696388244629},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4471365809440613},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4036983847618103},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.3527964651584625},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.07137253880500793},{"id":"https://openalex.org/C120665830","wikidata":"https://www.wikidata.org/wiki/Q14620","display_name":"Optics","level":1,"score":0.0},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0},{"id":"https://openalex.org/C77805123","wikidata":"https://www.wikidata.org/wiki/Q161272","display_name":"Social psychology","level":1,"score":0.0},{"id":"https://openalex.org/C26873012","wikidata":"https://www.wikidata.org/wiki/Q214781","display_name":"Condensed matter physics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3459637.3482195","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3459637.3482195","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 30th ACM International Conference on Information &amp; Knowledge Management","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":29,"referenced_works":["https://openalex.org/W113059239","https://openalex.org/W2022322548","https://openalex.org/W2089554624","https://openalex.org/W2112429379","https://openalex.org/W2134255060","https://openalex.org/W2147620601","https://openalex.org/W2519887557","https://openalex.org/W2583803680","https://openalex.org/W2741048099","https://openalex.org/W2741114205","https://openalex.org/W2808544127","https://openalex.org/W2906836970","https://openalex.org/W2944250323","https://openalex.org/W2963300178","https://openalex.org/W2977707586","https://openalex.org/W2992818769","https://openalex.org/W2997982033","https://openalex.org/W3015799890","https://openalex.org/W3034213836","https://openalex.org/W3040266635","https://openalex.org/W3048072497","https://openalex.org/W3068123808","https://openalex.org/W3102969158","https://openalex.org/W3102972033","https://openalex.org/W3129671802","https://openalex.org/W3133518153","https://openalex.org/W3135550350","https://openalex.org/W3152507776","https://openalex.org/W4288278932"],"related_works":["https://openalex.org/W2806741695","https://openalex.org/W3210364259","https://openalex.org/W4290647774","https://openalex.org/W3189286258","https://openalex.org/W3207797160","https://openalex.org/W2143820878","https://openalex.org/W2912112202","https://openalex.org/W2667207928","https://openalex.org/W4300558037","https://openalex.org/W4377864969"],"abstract_inverted_index":{"Attributed":[0],"network":[1,123],"anomaly":[2,24,69],"detection":[3],"is":[4,28,80,102],"essential":[5],"in":[6,35,91],"various":[7],"networked":[8],"systems.":[9],"It":[10,125],"aims":[11],"to":[12,54,63,82,104,112,129,150],"detect":[13,113],"nodes":[14,108,142],"that":[15,162],"significantly":[16],"deviate":[17],"from":[18,136],"their":[19],"corresponding":[20],"background.":[21],"In":[22],"conventional":[23],"detection,":[25],"the":[26,31,47,58,72,89,110,134,156],"background":[27,111],"defined":[29],"as":[30,57,109,133,148,155],"vast":[32],"majority.":[33,48],"But":[34],"networks,":[36],"anomalies":[37,75],"can":[38],"be":[39],"local":[40],"and":[41,78],"look":[42],"normal":[43],"when":[44],"compared":[45],"with":[46,143],"While":[49],"several":[50],"efforts":[51],"have":[52],"explored":[53],"consider":[55,106],"communities":[56,66],"background,":[59],"it":[60,79,101],"remains":[61],"challenging":[62],"learn":[64,151],"suitable":[65],"for":[67],"effective":[68],"detection.":[70],"Also,":[71],"patterns":[73],"of":[74,85,158],"are":[76,146],"unknown":[77],"nontrivial":[81],"define":[83],"criteria":[84],"anomalies.":[86,114,159],"To":[87],"bridge":[88],"gap,":[90],"this":[92],"paper,":[93],"we":[94,116],"argue":[95],"that,":[96],"by":[97],"using":[98],"appropriate":[99],"models,":[100],"sufficient":[103],"simply":[105],"neighbor":[107],"Correspondingly,":[115],"propose":[117],"a":[118,152],"novel":[119],"abnormality-aware":[120],"graph":[121],"neural":[122],"(AAGNN).":[124],"utilizes":[126],"subtractive":[127],"aggregation":[128],"represent":[130],"each":[131],"node":[132],"deviation":[135],"its":[137],"neighbors":[138],"(the":[139],"background).":[140],"Normal":[141],"high":[144],"confidence":[145],"employed":[147],"labels":[149],"tailored":[153],"hypersphere":[154],"criterion":[157],"Experiments":[160],"demonstrate":[161],"AAGNN":[163],"surpasses":[164],"state-of-the-art":[165],"methods":[166],"significantly.":[167]},"counts_by_year":[{"year":2026,"cited_by_count":6},{"year":2025,"cited_by_count":13},{"year":2024,"cited_by_count":6},{"year":2023,"cited_by_count":7},{"year":2022,"cited_by_count":3}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}
