Enabling cross-context learning with knowledge graphs for anomaly detection in communications networks
- Author
- Michael Weyns (UGent) , Sander Vanden Hautte, Annelies Lejon (UGent) , Veerle Ledoux (UGent) , Pieter Bonte (UGent) , Filip De Turck (UGent) , Sofie Van Hoecke (UGent) and Femke Ongenae (UGent)
- Organization
- Project
- Abstract
- Traditional anomaly detection, using statistics and thresholds, requires detailed domain knowledge to manually define these parameter thresholds, as well as continuous human intervention to adapt the AD algorithms to changes in, among others, context and data characteristics. Machine learning-based anomaly detection tackles these issues by directly learning (ab)normal behaviour from the data without human intervention. This requires a significant amount of training data, such that techniques are often only trained once in a representative environment and then deployed in various contexts and configurations. As anomalies often correspond with different, context-dependent characteristics, a machine learning-based anomaly detection model trained for a single reference context is likely to yield false positives and negatives when deployed in a context that is too dissimilar. This creates a need for context-aware anomaly detection algorithms, which automatically adapt to changes in context, deployment environment & configurations, data stream parameters, and available resources. In this paper, we propose a methodology to address the need for context-awareness in anomaly detection by means of a novel paradigm called cross-context learning. Specifically, we enable cross-context learning for anomaly detection by combining knowledge graphs, to capture the context in a formal manner, and transfer learning, to enable the adaptation. When compared to transfer learning without context-awareness, we found performance increases of up to 6.658% on the evaluated datasets.
- Keywords
- Anomaly detection, Context-aware, Knowledge graph, Transfer learning, Cross-context learning
Downloads
-
(...).pdf
- full text (Published version)
- |
- UGent only
- |
- |
- 1.76 MB
Citation
Please use this url to cite or link to this publication: http://hdl.handle.net/1854/LU-01JZJ6FZV83XN73YX3XCGV0XM7
- MLA
- Weyns, Michael, et al. “Enabling Cross-Context Learning with Knowledge Graphs for Anomaly Detection in Communications Networks.” JOURNAL OF NETWORK AND SYSTEMS MANAGEMENT, vol. 33, no. 4, 2025, doi:10.1007/s10922-025-09953-w.
- APA
- Weyns, M., Vanden Hautte, S., Lejon, A., Ledoux, V., Bonte, P., De Turck, F., … Ongenae, F. (2025). Enabling cross-context learning with knowledge graphs for anomaly detection in communications networks. JOURNAL OF NETWORK AND SYSTEMS MANAGEMENT, 33(4). https://doi.org/10.1007/s10922-025-09953-w
- Chicago author-date
- Weyns, Michael, Sander Vanden Hautte, Annelies Lejon, Veerle Ledoux, Pieter Bonte, Filip De Turck, Sofie Van Hoecke, and Femke Ongenae. 2025. “Enabling Cross-Context Learning with Knowledge Graphs for Anomaly Detection in Communications Networks.” JOURNAL OF NETWORK AND SYSTEMS MANAGEMENT 33 (4). https://doi.org/10.1007/s10922-025-09953-w.
- Chicago author-date (all authors)
- Weyns, Michael, Sander Vanden Hautte, Annelies Lejon, Veerle Ledoux, Pieter Bonte, Filip De Turck, Sofie Van Hoecke, and Femke Ongenae. 2025. “Enabling Cross-Context Learning with Knowledge Graphs for Anomaly Detection in Communications Networks.” JOURNAL OF NETWORK AND SYSTEMS MANAGEMENT 33 (4). doi:10.1007/s10922-025-09953-w.
- Vancouver
- 1.Weyns M, Vanden Hautte S, Lejon A, Ledoux V, Bonte P, De Turck F, et al. Enabling cross-context learning with knowledge graphs for anomaly detection in communications networks. JOURNAL OF NETWORK AND SYSTEMS MANAGEMENT. 2025;33(4).
- IEEE
- [1]M. Weyns et al., “Enabling cross-context learning with knowledge graphs for anomaly detection in communications networks,” JOURNAL OF NETWORK AND SYSTEMS MANAGEMENT, vol. 33, no. 4, 2025.
@article{01JZJ6FZV83XN73YX3XCGV0XM7,
abstract = {{Traditional anomaly detection, using statistics and thresholds, requires detailed domain knowledge to manually define these parameter thresholds, as well as continuous human intervention to adapt the AD algorithms to changes in, among others, context and data characteristics. Machine learning-based anomaly detection tackles these issues by directly learning (ab)normal behaviour from the data without human intervention. This requires a significant amount of training data, such that techniques are often only trained once in a representative environment and then deployed in various contexts and configurations. As anomalies often correspond with different, context-dependent characteristics, a machine learning-based anomaly detection model trained for a single reference context is likely to yield false positives and negatives when deployed in a context that is too dissimilar. This creates a need for context-aware anomaly detection algorithms, which automatically adapt to changes in context, deployment environment & configurations, data stream parameters, and available resources. In this paper, we propose a methodology to address the need for context-awareness in anomaly detection by means of a novel paradigm called cross-context learning. Specifically, we enable cross-context learning for anomaly detection by combining knowledge graphs, to capture the context in a formal manner, and transfer learning, to enable the adaptation. When compared to transfer learning without context-awareness, we found performance increases of up to 6.658% on the evaluated datasets.}},
articleno = {{77}},
author = {{Weyns, Michael and Vanden Hautte, Sander and Lejon, Annelies and Ledoux, Veerle and Bonte, Pieter and De Turck, Filip and Van Hoecke, Sofie and Ongenae, Femke}},
issn = {{1064-7570}},
journal = {{JOURNAL OF NETWORK AND SYSTEMS MANAGEMENT}},
keywords = {{Anomaly detection,Context-aware,Knowledge graph,Transfer learning,Cross-context learning}},
language = {{eng}},
number = {{4}},
pages = {{32}},
title = {{Enabling cross-context learning with knowledge graphs for anomaly detection in communications networks}},
url = {{http://doi.org/10.1007/s10922-025-09953-w}},
volume = {{33}},
year = {{2025}},
}
- Altmetric
- View in Altmetric
- Web of Science
- Times cited: