Monitoring binary networks for anomalous communication patterns based on the structural statistics. (June 2020)

• Record Type: Journal Article
• Authors: Zhou, Panpan; Lin, Dennis K.J.; Niu, Xiaoyue; He, Zhen
• Is Part Of: Computers & industrial engineering. Volume 144(2020)
• Publication Date: 2020-06
• Subjects: Network monitoring -- Control charts -- Exponential random graph models -- Directed networks -- Undirected networks; Engineering -- Data processing -- Periodicals; Industrial engineering -- Periodicals; 620.00285
• DOI: 10.1016/j.cie.2020.106451
• Languages: English
• ISSNs: 0360-8352

Abstract

Highlights: Network features are characterized by counts of edge, star and triangle structures. Hotelling T 2 control chart for the structural statistics is provided. Exponential-random-graph-model-based performance evaluation framework is provided. The method is superior in detecting large shifts of reciprocity and transitivity. Anomalies are effectively detected based on real network data. Abstract: Network monitoring has become increasingly popular in the area of statistical process control due to its wide applications in fraud detection, corporate management and political behavioral analysis. This paper focuses on the cases where the communication pattern is significant while changes in specific nodes are negligible. The important features including the density, reciprocity, degree variability, and transitivity are considered to reflect the commonly-encountered communication patterns in social networks. The structural statistics are provided for characterizing the main features. A multivariate control chart is adopted to monitor the structural statistics simultaneously so as to account for their correlations and to decrease the overall false alarm rate. A performance evaluation framework is proposed based on the Exponential Random Graph Models (ERGMs) in order to simulate the shifts of communication patterns. The results of the numerical experiments show that the Hotelling T 2 control chart for the structural statistics outperforms several benchmark methods especially in detecting the large shifts of reciprocity and transitivity. The effectiveness of the proposed method is validated through the analysis of the Enron email communication networks.