A new class of models for dynamic networks is proposed, called mutually exciting point process graphs (MEG), motivated by a practical application in computer network security. MEG is a scalable network-wide statistical model for point processes with dyadic marks, which can be used for anomaly detection when assessing the significance of previously unobserved connections. The model combines mutually exciting point processes to estimate dependencies between events and latent space models to infer relationships between the nodes. The intensity functions for each network edge are parameterised exclusively by node-specific parameters, which allows information to be shared across the network. Fast inferential procedures using modern gradient ascent algorithms are exploited. The model is tested on simulated graphs and real world computer network datasets, demonstrating excellent performance.
翻译:在计算机网络安全实际应用的激励下,提出了一套新的动态网络模型,称为相互振奋的点进程图(MEG)。MEG是一个可扩缩的网络范围统计模型,用于使用dyadic标记的点进程,可用于在评估先前未观测到的连接的重要性时探测异常现象。该模型将估计事件与潜在空间模型之间关联的相互振奋点进程结合起来,以推断节点之间的关系。每个网络边缘的强度功能都完全以节点特定参数作为参数,从而可以在整个网络中共享信息。利用现代梯度算法快速推算程序,该模型以模拟图形和真实世界计算机网络数据集进行测试,展示出优秀的性能。