TY - JOUR
T1 - Modelling and monitoring multi-relational networks with ordinal information
AU - Wang, Junjie
AU - Lui, Chun Fai
AU - Xie, Min
PY - 2024/10/24
Y1 - 2024/10/24
N2 - Network relationships can be widely seen among entities in various fields such as social networks, supply networks and Internet of Things (IoT). Sometimes abnormal events such as cyber-attacks occur to cause an abrupt increase or decrease in the traffic of networks. Many anomaly detection methods have been developed to identify such abnormal events in networks. In recent years, statistical process control (SPC) has attracted more and more attention in network anomaly detection. However, many of the existing statistical models regard the interaction between two nodes in unweighted directed networks as a binary variable, i.e. presence and absence of contacts, which fails to reflect the intensity level of interactions. This article proposes a new model to describe the dyadic interactions with several ordinal levels and introduces special quantities to incorporate the ordinal information into the model. The model can be expressed in a matrix form to enable easy parameter estimation and derivation of a quadratic monitoring statistic. Numerous simulation studies show that the proposed methods detect anomalies in multi-relational networks more quickly than existing monitoring methods. A case study exhibits the implementation and superiority of the proposed method. © 2024 Informa UK Limited, trading as Taylor & Francis Group.
AB - Network relationships can be widely seen among entities in various fields such as social networks, supply networks and Internet of Things (IoT). Sometimes abnormal events such as cyber-attacks occur to cause an abrupt increase or decrease in the traffic of networks. Many anomaly detection methods have been developed to identify such abnormal events in networks. In recent years, statistical process control (SPC) has attracted more and more attention in network anomaly detection. However, many of the existing statistical models regard the interaction between two nodes in unweighted directed networks as a binary variable, i.e. presence and absence of contacts, which fails to reflect the intensity level of interactions. This article proposes a new model to describe the dyadic interactions with several ordinal levels and introduces special quantities to incorporate the ordinal information into the model. The model can be expressed in a matrix form to enable easy parameter estimation and derivation of a quadratic monitoring statistic. Numerous simulation studies show that the proposed methods detect anomalies in multi-relational networks more quickly than existing monitoring methods. A case study exhibits the implementation and superiority of the proposed method. © 2024 Informa UK Limited, trading as Taylor & Francis Group.
KW - directed network
KW - dyadic interaction
KW - generalised likelihood ratio test
KW - Ordinal information
KW - statistical process control
UR - http://www.scopus.com/inward/record.url?scp=85207513360&partnerID=8YFLogxK
UR - https://www.scopus.com/record/pubmetrics.uri?eid=2-s2.0-85207513360&origin=recordpage
U2 - 10.1080/00207543.2024.2415979
DO - 10.1080/00207543.2024.2415979
M3 - RGC 21 - Publication in refereed journal
SN - 0020-7543
JO - International Journal of Production Research
JF - International Journal of Production Research
ER -