The paper introduces Jev-GAD, a training‑free generalist graph anomaly detection framework that combines complementary structural, attribute, and neighborhood evidence with a single frozen pretrained language model for anomaly assessment. It transforms heterogeneous statistics into graph‑relative percentiles and uses a semantic Graph‑to‑State (G2S) transformation to feed evidence into a non‑generative decision readout, fusing the resulting scores with four statistical measures. Experiments on seven benchmark datasets show Jev‑GAD achieving high AUROC (89.18%) and AUPRC (52.40%) scores, demonstrating the effectiveness of pretrained decision readout and semantic evidence grounding.
By Xinyu Zhao, Qingyun Sun, Ziwei Zhang, Tianchen Zhu, Daqing Li, Jianxin Li
arXiv:2511. 17113v3 Announce Type: replace-cross Abstract: Network Intrusion Detection Systems (NIDS) are essential tools for detecting network attacks and intrusions.
By Georgios Anyfantis, Pere Barlet-Ros
arXiv:2605.26857v2 Announce Type: replace
Abstract: Driven by the pressing demand for graph anomaly detection (GAD) in high-stakes domains, the generalist GAD paradigm, which trains a single detector...
By Yiming Xu, Zihan Chen, Zhen Peng, Song Wang, Bin Shi, Bo Dong, Chao Shen
arXiv:2608. 10699v1 Announce Type: cross Abstract: Text-Attributed Graphs (TAGs), endowed with abundant textual content along with topological structures, have emerged as a versatile backbone for real-world anomaly detection spanning large language model security, social network moderation, and cyber threat identification.
By Ziyan Wang, Liwen Wu, Cheng Xie, Song Gao, Zhenli He, Xin Jin
The paper investigates whether synthetic data can replace real-world training data for generalist graph anomaly detection (GAD). It introduces AG-FORGE, a framework that automatically generates anomalous graphs, and shows that synthetic data can match real-world performance but does not surpass it due to method limitations. To overcome this, the authors propose TS-GGAD, a model that jointly learns topological and semantic anomaly cues with a curriculum learning strategy, achieving superior results on 14 real-world datasets when trained on AG-FORGE-generated data.
By Yujing Liu, Yixin Liu, Yue Tan, Xiaofeng Cao, Alan Wee-Chung Liew, Heng Tao Shen, Shirui Pan
arXiv:2606. 12673v1 Announce Type: cross Abstract: Cross-domain graph anomaly detection (GAD) aims to identify abnormal nodes in unseen target graphs, showing strong potential in real-world applications with heterogeneous graph data.
By Phan Nguyen, Dat Cao, Hien Chu, Khue Hoang
AnomalyGFM is a graph foundation model designed for zero- and few-shot anomaly detection in graphs. It learns graph‑agnostic normal and abnormal prototypes by aligning data‑independent class representations with node representation residuals, enabling consistent abnormality measurement across diverse graph datasets. Experiments on 11 real‑world GAD datasets show that AnomalyGFM outperforms state‑of‑the‑art methods in both zero‑shot and few‑shot settings.
By Hezhe Qiao, Chaoxi Niu, Ling Chen, Guansong Pang
arXiv:2511. 22078v2 Announce Type: replace Abstract: Many real-world scenarios involving streaming information can be represented as temporal graphs, where data flows through dynamic changes in edges over time.
By Simone Mungari, Albert Bifet, Giuseppe Manco, Bernhard Pfahringer
arXiv:2510. 26307v3 Announce Type: replace-cross Abstract: Anomaly detection is a critical task in cybersecurity, where identifying insider threats, access violations, and coordinated attacks is essential for ensuring system resilience.
By Laura Jiang, Reza Ryan, Qian Li, Nasim Ferdosian
arXiv:2505. 18934v2 Announce Type: replace-cross Abstract: Graph Anomaly Detection (GAD) in heterogeneous networks presents unique challenges due to node and edge heterogeneity.
By Xiping Li, Xiangyu Dong, Xingyi Zhang, Kun Xie, Yuanhao Feng, Bo Wang, Guilin Li, Wuxiong Zeng, Xiujun Shu, Sibo Wang
arXiv:2510. 02014v3 Announce Type: replace Abstract: Graph anomaly detection (GAD) has attracted growing interest for its crucial ability to uncover irregular patterns in broad applications.
By Guolei Zeng, Hezhe Qiao, Guoguo Ai, Jinsong Guo, Guansong Pang
arXiv:2602.06859v3 Announce Type: replace-cross
Abstract: Graph Anomaly Detection (GAD) aims to identify irregular patterns in graph data, and recent works have explored zero-shot generalist GAD to e...
By Xinyu Zhao, Qingyun Sun, Jiayi Luo, Xingcheng Fu, Jianxin Li