Real-time Abnormal Change Detection in Graphs

A computer program product for detecting abnormal changes in real-time in dynamic graphs, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a computer to cause the computer to perform a method comprising:

• extracting, by a graph sampler, an active sampled graph from an underlying base graph;
• merging, by a graph merger, the active sampled graph with graph updates within a predetermined recent time period to generate a merged graph;
• computing, by a graph diameter computer, a diameter of the merged graph;
• determining, by a graph diameter change determination device, whether a graph diameter change exists;
• and
• generating, by an alarm generator, a user-perceptible alarm responsive to the graph diameter change.

A system for detecting abnormal changes in real-time in dynamic graphs, the system comprising:

• a graph sampler for extracting an active sampled graph from an underlying base graph;
• a graph merger for merging the active sampled graph with graph updates within a predetermined recent time period to generate a merged graph;
• a graph diameter computer for computing a diameter of the merged graph;
• a graph diameter change determination device for determining whether a graph diameter change exists;
• and
• an alarm generator for generating a user-perceptible alarm responsive to the graph diameter change.