A source separation approach to temporal graph modelling for computer networks. (arXiv:2303.15950v1 [cs.CR])

Detecting malicious activity within an enterprise computer network can be
framed as a temporal link prediction task: given a sequence of graphs
representing communications between hosts over time, the goal is to predict
which edges should--or should not--occur in the future. However, standard
temporal link prediction algorithms are ill-suited for computer network
monitoring as they do not take account of the peculiar short-term dynamics of
computer network activity, which exhibits sharp seasonal variations. In order
to build a better model, …

account algorithms build communications computer enterprise future graphs link malicious monitoring network network monitoring networks order predict prediction sharp standard task temporal