A new class of models for dynamic networks is proposed, called mutually exciting point process graphs (MEG). MEG is a scalable network-wide statistical model for point processes with dyadic marks, which can be used for anomaly detection when assessing the significance of future events, including previously unobserved connections between nodes. The model combines mutually exciting point processes to estimate dependencies between events and latent space models to infer relationships between the nodes. The intensity functions for each network edge are characterised exclusively by node-specific parameters, which allows information to be shared across the network. This construction enables estimation of intensities even for unobserved edges, which is particularly important in real world applications, such as computer networks arising in cyber-security. A recursive form of the log-likelihood function for MEG is obtained, which is used to derive fast inferential procedures via modern gradient ascent algorithms. An alternative EM algorithm is also derived. The model and algorithms are tested on simulated graphs and real world datasets, demonstrating excellent performance.
翻译:提出了动态网络的新模型类别,称为相互振奋的点进程图(MEG)。 MEG是用于带有dyadic标记的点点进程的一个可扩展的全网络统计模型,可用于在评估未来事件的重要性时探测异常现象,包括以前未观察到的节点之间的联系。该模型结合了对事件与潜在空间模型之间的依赖性进行估计的相互振奋点进程,以推断节点之间的关系。每个网络边缘的强度功能都完全以节点特定参数为特征,使整个网络能够共享信息。这一构建使得即使在未观测到的边缘也能够估计强度,这对于现实世界的应用尤其重要,例如计算机网络在网络安全中产生的作用。获得了MEG的日志类函数的循环形式,用于通过现代梯度算法获得快速的推断程序。还衍生了另一种EM算法。模型和算法通过模拟图表和真实的世界数据集进行测试,显示了出色的性表现。