This work considers the problem of heterogeneous graph-level anomaly detection. Heterogeneous graphs are commonly used to represent behaviours between different types of entities in complex industrial systems for capturing as much information about the system operations as possible. Detecting anomalous heterogeneous graphs from a large set of system behaviour graphs is crucial for many real-world applications like online web/mobile service and cloud access control. To address the problem, we propose HRGCN, an unsupervised deep heterogeneous graph neural network, to model complex heterogeneous relations between different entities in the system for effectively identifying these anomalous behaviour graphs. HRGCN trains a hierarchical relation-augmented Heterogeneous Graph Neural Network (HetGNN), which learns better graph representations by modelling the interactions among all the system entities and considering both source-to-destination entity (node) types and their relation (edge) types. Extensive evaluation on two real-world application datasets shows that HRGCN outperforms state-of-the-art competing anomaly detection approaches. We further present a real-world industrial case study to justify the effectiveness of HRGCN in detecting anomalous (e.g., congested) network devices in a mobile communication service. HRGCN is available at https://github.com/jiaxililearn/HRGCN.

这项研究考虑了异构图层次异常检测的问题，提出了HRGCN，一种无监督的深度异构图神经网络，用于有效地识别系统中的异常行为图。在两个真实应用数据集上的广泛评估表明，HRGCN优于目前最先进的竞争性异常检测方法。进一步展示了一个实际工业案例研究，以证明HRGCN在检测移动通信服务中的异常（如拥塞）网络设备方面的有效性。

HRGCN：基于层次关系增强图神经网络的异构图层级异常检测