Research & Papers

X-AddGraph explains graph anomaly AI with zero AUC loss

First explainability for AddGraph detector, verified to 10 decimal places

Deep Dive

Dynamic graph anomaly detectors flag suspicious edges in evolving networks—like unusual communications in enterprise systems—but typically output only a score, leaving analysts without a reason for the alert. That opacity is a major issue in regulated, cooperative information systems where automated decisions must be auditable. Now, researchers from the team of Iyad Assaad Nekka have released X-AddGraph, the first explainability framework for AddGraph, a foundational GCN+GRU model for edge-level anomaly detection. X-AddGraph presents a Dual Spatial-Temporal Attribution (DSTA) mechanism with three modules, each aligned to AddGraph's architecture: gradient-based relevance over the current adjacency structure for spatial explainability, direct reading of contextual attention weights computed during inference for short-term temporal insight (at zero additional cost), and gradient rollback through recurrent hidden states for long-term temporal analysis.

Because X-AddGraph is strictly post-hoc, the frozen AddGraph detector preserves its performance exactly—the paper verifies Delta AUC = 0 empirically to ten decimal places. On the UCI Message benchmark, the baseline AddGraph reaches an average per-snapshot AUC of 0.8705, exceeding originally published results, and X-AddGraph reproduces every score identically while adding explanations. Evaluated across confident true positives, low-confidence positives, false positives, and random edge samples, the long-term attribution component identifies historical snapshots with significantly more counterfactual signal than random selection (0.127 vs 0.074)—capability no spatially-blind explainer can offer. The authors plan to release their implementation for full reproducibility, targeting CoopIS 2026.

Key Points
  • X-AddGraph adds post-hoc explainability to AddGraph without touching the detector, preserving AUC exactly (Delta = 0 to 10 decimals)
  • DSTA uses three architecture-aligned components: gradient-based spatial, zero-cost attention weights, and recurrent gradient rollback
  • On UCI Message, AddGraph achieves 0.8705 AUC and long-term attribution finds counterfactual signals 0.127 vs 0.074 over random

Why It Matters

Auditors in regulated networks can finally see why anomaly AI flags edges, with zero accuracy trade-off.

📬 Get the top 10 AI stories daily