Research Papers 论文研究 8d ago Updated 7d ago 更新于 7天前 45

Dual Spatial-Temporal Attribution: Architecture-Aligned Post-Hoc Explainability for Recurrent Graph Anomaly Detection 双重时空归因:面向循环图异常检测的架构对齐事后可解释性

X-AddGraph introduces the first post-hoc explainability framework for AddGraph, a foundational GCN+GRU model for edge-level anomaly detection in dynamic graphs, addressing a critical opacity gap in regulated AI systems. The Dual Spatial-Temporal Attribution (DSTA) mechanism aligns three attribution components with AddGraph's architecture: gradient-based spatial relevance, zero-cost short-term temporal attribution via existing attention weights, and gradient rollback through recurrent hidden stat 提出X-AddGraph框架,首次为AddGraph动态图异常检测模型提供可解释性能力 设计DSTA双时空归因机制,包含空间梯度归因、短期注意力权重读取、长期梯度回滚三个组件 检测器完全冻结,性能零损失(Delta AUC = 0),UCI Message基准AUC达0.8705 长期归因在识别历史快照反事实信号上显著优于随机选择(0.127 vs 0.074) 开源完整实现代码,支持完全复现

58
Hot 热度
72
Quality 质量
65
Impact 影响力

Analysis 深度分析

TL;DR

  • X-AddGraph introduces the first post-hoc explainability framework for AddGraph, a foundational GCN+GRU model for edge-level anomaly detection in dynamic graphs, addressing a critical opacity gap in regulated AI systems.
  • The Dual Spatial-Temporal Attribution (DSTA) mechanism aligns three attribution components with AddGraph's architecture: gradient-based spatial relevance, zero-cost short-term temporal attribution via existing attention weights, and gradient rollback through recurrent hidden states for long-term temporal attribution.
  • The detector remains completely frozen during explanation generation, preserving detection performance exactly (Delta AUC = 0 to ten decimal places), with the trained baseline achieving 0.8705 average per-snapshot AUC on UCI Message, exceeding the originally published result.
  • Long-term attribution identifies historical snapshots with significantly more counterfactual signal than random selection (0.127 vs. 0.074), a capability unattainable by spatially-blind explainers, validated across confident true positives, low-confidence true positives, false positives, and random edge samples.
  • Full implementation is released for reproducibility, enabling auditable and trustworthy deployment of graph anomaly detectors in cooperative, regulated information systems.

Why It Matters

This work bridges a critical trust gap in dynamic graph anomaly detection: high-performing deep learning models have been deployed without any explainability, making them unsuitable for regulated environments where automated decisions must be auditable. By providing architecture-aligned, strictly post-hoc explanations without compromising detection performance, X-AddGraph enables practitioners to deploy graph-based anomaly detectors in production settings where accountability and transparency are mandatory, such as financial fraud detection, cybersecurity, and network monitoring.

Technical Details

  • Architecture-aligned DSTA mechanism: Three attribution components map directly to AddGraph's modules—a gradient-based relevance attribution over the current adjacency matrix (spatial), direct extraction of contextual attention weights computed during inference (short-term temporal, zero additional computational cost), and gradient rollback through GRU recurrent hidden states (long-term temporal).
  • Post-hoc and non-invasive design: The detector is entirely frozen; no retraining or architectural modification is required. Performance preservation is empirically verified to ten decimal places (Delta AUC = 0).
  • Benchmark performance: On the UCI Message dynamic graph benchmark, the retrained AddGraph baseline achieves 0.8705 average per-snapshot AUC, surpassing the originally published result, while X-AddGraph reproduces every detection score identically and adds explanatory outputs.
  • Counterfactual signal evaluation: Across four edge populations (confident TP, low-confidence TP, FP, random), long-term attribution selects historical snapshots carrying meaningfully more counterfactual signal (0.127) compared to random selection (0.074), demonstrating that temporal attribution captures genuinely informative historical context.
  • Reproducibility: The complete implementation is publicly released, supporting full reproducibility and enabling downstream research on explainable graph anomaly detection.

Industry Insight

  • The architecture-aligned approach—mapping each attribution component to a specific model module—offers a reusable blueprint for adding explainability to other recurrent graph models without sacrificing performance, suggesting that post-hoc explainability can be systematically integrated rather than bolted on ad hoc.
  • The finding that long-term temporal attribution captures counterfactual signal unavailable to spatial-only explainers highlights the importance of temporal interpretability in dynamic systems; practitioners deploying graph anomaly detectors should prioritize methods that expose historical context, not just current structure.
  • As regulatory frameworks increasingly mandate auditability for automated decisions (e.g., EU AI Act), this work demonstrates that high-accuracy deep learning models for graph analytics can meet compliance requirements without performance trade-offs, making explainable graph AI a near-term practical necessity rather than a theoretical concern.

TL;DR

  • 提出X-AddGraph框架,首次为AddGraph动态图异常检测模型提供可解释性能力
  • 设计DSTA双时空归因机制,包含空间梯度归因、短期注意力权重读取、长期梯度回滚三个组件
  • 检测器完全冻结,性能零损失(Delta AUC = 0),UCI Message基准AUC达0.8705
  • 长期归因在识别历史快照反事实信号上显著优于随机选择(0.127 vs 0.074)
  • 开源完整实现代码,支持完全复现

为什么值得看

本文解决了动态图异常检测领域长期存在的"高准确率但不可解释"痛点,为监管环境下的可信AI部署提供了可行方案。其架构对齐的事后归因方法在不牺牲检测性能的前提下实现了时空双重可解释性,对金融风控、网络安全等需要审计追溯的应用场景具有重要参考价值。

技术解析

  • DSTA归因机制:三个归因组件分别对齐AddGraph的GCN空间模块、注意力机制和GRU循环模块,实现架构感知的归因设计
  • 空间归因:基于当前时间步邻接矩阵的梯度相关性计算,识别关键边结构
  • 短期时间归因:直接读取推理过程中已计算的上下文注意力权重,零额外计算成本
  • 长期时间归因:通过梯度回滚穿越循环隐藏状态,追溯历史快照的影响
  • 实验验证:在UCI Message基准上,X-AddGraph复现了所有检测分数,并在四类边样本(高置信TP、低置信TP、FP、随机样本)上验证了归因质量

行业启示

  • 可解释性正从"附加功能"转变为监管合规的"必要组件",尤其在金融、医疗等高风险领域
  • 架构对齐的事后归因方法为现有模型提供了一条兼顾性能与透明度的实用路径
  • 动态图分析的可解释性研究仍处于早期阶段,时空联合归因是未来重要方向

Disclaimer: The above content is generated by AI and is for reference only. 免责声明:以上内容由 AI 生成,仅供参考。

Research 科学研究 Security 安全 Evaluation 评测