Skip to content

Commit 9056e01

Browse files
JohTJohT
committed
Add graph visualizations to anomaly detection
1 parent 5d1a5e4 commit 9056e01

File tree

5 files changed

+289
-1
lines changed

5 files changed

+289
-1
lines changed

‎domains/anomaly-detection/graphs/TopBottleneck.cypher‎

Lines changed: 73 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,73 @@
1+
// Anomaly Detection Graphs: Find top nodes marked as "Bottleneck" including their incoming dependencies and output them in Graphviz format.
2+
3+
// Step 1: Query overall statistics, e.g. min/max weight for later normalization
4+
MATCH (sourceForStatistics)-[dependencyForStatistics:DEPENDS_ON]->(targetForStatistics)
5+
WHERE $projection_node_label IN labels(sourceForStatistics)
6+
AND $projection_node_label IN labels(targetForStatistics)
7+
WITH max(coalesce(dependencyForStatistics.weight25PercentInterfaces, dependencyForStatistics.weight)) AS maxWeight
8+
// Step 2: Query selected central node
9+
MATCH (central)
10+
WHERE $projection_node_label IN labels(central)
11+
AND central.anomalyBottleneckRank = toInteger($projection_node_rank)
12+
WITH maxWeight
13+
,central
14+
,"Top Rank #" + $projection_node_rank + " " + $projection_language + " " + $projection_node_label + " Bottleneck: " AS graphLabel
15+
,coalesce(central.fqn, central.globalFqn, central.fileName, central.signature, central.name) AS targetName
16+
,[] AS graphVizOutput
17+
WITH *, replace(replace(targetName, '.', '.\\n'), '/', '/\\n') AS targetNameSplit
18+
WITH *, targetNameSplit + "\\n(bottleneck #" + central.anomalyBottleneckRank + ")" AS centralNodeLabel
19+
WITH *, graphVizOutput + ["graph [label=\"" + graphLabel + targetName + "\\n\\n\"];"] AS graphVizOutput
20+
WITH *, graphVizOutput + ["central [label=\"" + centralNodeLabel + "\"];"] AS graphVizOutput
21+
// Step 3: Query direct incoming dependencies to the central node
22+
MATCH (source)-[dependency:DEPENDS_ON]->(central)
23+
WHERE $projection_node_label IN labels(source)
24+
AND source.outgoingDependencies > 0
25+
ORDER BY dependency.weight DESC, source.name ASC
26+
LIMIT 30
27+
WITH *, coalesce(dependency.weight25PercentInterfaces, dependency.weight, 1) AS weight
28+
WITH *, round((toFloat(weight) / toFloat(maxWeight) * 2.0) + 0.4, 1.0) AS penWidth
29+
WITH *, "label=" + weight + "; weight=" + weight + "; penwidth=" + penWidth AS edgeAttributes
30+
WITH maxWeight
31+
,central
32+
,graphVizOutput
33+
,collect(source) AS incomingDependencyNodes
34+
,collect("\"" + source.name + "\" -> central [" + edgeAttributes + "];") AS directInEdges
35+
WITH *, graphVizOutput + directInEdges AS graphVizOutput
36+
// Step 4: Query direct outgoing dependencies from the central node
37+
MATCH (source)<-[dependency:DEPENDS_ON]-(central)
38+
WHERE $projection_node_label IN labels(source)
39+
AND source.incomingDependencies > 0
40+
ORDER BY dependency.weight DESC, source.name ASC
41+
LIMIT 30
42+
WITH *, coalesce(dependency.weight25PercentInterfaces, dependency.weight, 1) AS weight
43+
WITH *, round((toFloat(weight) / toFloat(maxWeight) * 2.0) + 0.4, 1.0) AS penWidth
44+
WITH *, "label=" + weight + "; weight=" + weight + "; penwidth=" + penWidth AS edgeAttributes
45+
WITH maxWeight
46+
,central
47+
,graphVizOutput
48+
,incomingDependencyNodes
49+
,collect(source) AS outgoingDependencyNodes
50+
,collect("central -> \"" + source.name + "\" [" + edgeAttributes + "];") AS directOutEdges
51+
WITH *, graphVizOutput + directOutEdges AS graphVizOutput
52+
WITH *, incomingDependencyNodes + outgoingDependencyNodes AS directDependentNodes
53+
// Step 5: Query dependencies between direct dependencies outside the central node
54+
UNWIND directDependentNodes AS directDependentNode
55+
MATCH (directDependentNode)-[dependency:DEPENDS_ON]->(anotherDirectDependentNode)
56+
WHERE anotherDirectDependentNode IN directDependentNodes
57+
AND anotherDirectDependentNode <> directDependentNode
58+
ORDER BY dependency.weight DESC, directDependentNode.name ASC
59+
WITH maxWeight
60+
,central
61+
,graphVizOutput
62+
,directDependentNode
63+
,dependency
64+
,collect(anotherDirectDependentNode)[0] AS firstLinkedDependentNode
65+
LIMIT 60
66+
WITH *, coalesce(dependency.weight25PercentInterfaces, dependency.weight, 1) AS weight
67+
// Use a fixed small pen width for secondary dependencies for better visibility of the more important direct dependency
68+
WITH *, "label=" + weight + "; weight=" + weight + "; penwidth=0.2" AS edgeAttributes
69+
WITH *, "\"" + directDependentNode.name + "\" -> \"" + firstLinkedDependentNode.name + "\"" AS directDependenciesEdge
70+
WITH *, collect(directDependenciesEdge + " [" + edgeAttributes + "]") AS directDependenciesEdges
71+
WITH *, graphVizOutput + directDependenciesEdges AS graphVizOutput
72+
UNWIND graphVizOutput AS graphVizOutputLine
73+
RETURN DISTINCT graphVizOutputLine

‎domains/anomaly-detection/graphs/TopCentral.template.gv‎

Lines changed: 27 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,27 @@
1+
// This is a GraphViz dot template file for the visualization of a anomaly archetype graphs with a selected central node.
2+
// The main part of the template is marked by the comments "Begin-Template" and "End-Template".
3+
// It also contains a simple example graph.
4+
//
5+
strict digraph top_central_template {
6+
//Begin-Template
7+
graph [layout = "fdp"; start = "7"; splines = "spline"; beautify = true;];
8+
graph [fontname = "Helvetica,Arial,sans-serif"; labelloc = "t";];
9+
node [fontsize = 8;];
10+
edge [fontsize = 4;];
11+
node [style = "filled"; color = "0.58 0.75 0.75"; fillcolor = "0.58 0.15 0.99"; margin = "0.05,0.05"];
12+
edge [color = "0.58 0.75 0.85"; arrowsize = "0.4";];
13+
14+
central [shape = "doublecircle"; margin = "0.00001,0.00001";];
15+
central [fontsize = 10;];
16+
central [color = "0.52 0.7 0.7"; fillcolor = "0.52 0.4 0.9"; penwidth = 3;];
17+
18+
limit_hint [color = "0.52 0.7 0.7"; fillcolor = "0.52 0.4 0.9";]
19+
limit_hint [shape = "note"; penwidth = 2; fontsize = 10]
20+
limit_hint [label = "limited\nnode count";]
21+
limit_hint -> central [dir = "back"; arrowtail = "inv"]; // Signals that the number of edges might have been limited
22+
23+
//End-Template
24+
"A" -> "central" [penwidth = 1.0; label = 1;];
25+
"A" -> "B" [penwidth = 3.0; label = 4;];
26+
"B" -> "central" [penwidth = 2.0; label = 2;];
27+
}

‎domains/anomaly-detection/graphs/TopHub.cypher‎

Lines changed: 56 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,56 @@
1+
// Anomaly Detection Graphs: Find top nodes marked as "central" including their incoming dependencies and output them in Graphviz format.
2+
3+
// Step 1: Query overall statistics, e.g. min/max weight for later normalization
4+
MATCH (sourceForStatistics)-[dependencyForStatistics:DEPENDS_ON]->(targetForStatistics)
5+
WHERE $projection_node_label IN labels(sourceForStatistics)
6+
AND $projection_node_label IN labels(targetForStatistics)
7+
WITH max(coalesce(dependencyForStatistics.weight25PercentInterfaces, dependencyForStatistics.weight)) AS maxWeight
8+
// Step 2: Query selected central node
9+
MATCH (central)
10+
WHERE $projection_node_label IN labels(central)
11+
AND central.anomalyHubRank = toInteger($projection_node_rank)
12+
WITH maxWeight
13+
,central
14+
,"Top Rank #" + $projection_node_rank + " " + $projection_language + " " + $projection_node_label + " Hub: " AS graphLabel
15+
,coalesce(central.fqn, central.globalFqn, central.fileName, central.signature, central.name) AS targetName
16+
,[] AS graphVizOutput
17+
WITH *, replace(replace(targetName, '.', '.\\n'), '/', '/\\n') AS targetNameSplit
18+
WITH *, targetNameSplit + "\\n(hub #" + central.anomalyHubRank + ")" AS centralNodeLabel
19+
WITH *, graphVizOutput + ["graph [label=\"" + graphLabel + targetName + "\\n\\n\"];"] AS graphVizOutput
20+
WITH *, graphVizOutput + ["central [label=\"" + centralNodeLabel + "\"];"] AS graphVizOutput
21+
// Step 3: Query direct incoming dependencies to the central node
22+
MATCH (source)-[dependency:DEPENDS_ON]->(central)
23+
WHERE $projection_node_label IN labels(source)
24+
AND source.outgoingDependencies > 0
25+
ORDER BY dependency.weight DESC, source.name ASC
26+
LIMIT 70
27+
WITH *, coalesce(dependency.weight25PercentInterfaces, dependency.weight, 1) AS weight
28+
WITH *, round((toFloat(weight) / toFloat(maxWeight) * 2.0) + 0.4, 1.0) AS penWidth
29+
WITH *, "label=" + weight + "; weight=" + weight + "; penwidth=" + penWidth AS edgeAttributes
30+
WITH maxWeight
31+
,central
32+
,graphVizOutput
33+
,collect(source) AS directDependentNodes
34+
,collect("\"" + source.name + "\" -> central [" + edgeAttributes + "];") AS directInEdges
35+
WITH *, graphVizOutput + directInEdges AS graphVizOutput
36+
// Step 4: Query dependencies between direct dependencies outside the central node
37+
UNWIND directDependentNodes AS directDependentNode
38+
MATCH (directDependentNode)-[dependency:DEPENDS_ON]->(anotherDirectDependentNode)
39+
WHERE anotherDirectDependentNode IN directDependentNodes
40+
AND anotherDirectDependentNode <> directDependentNode
41+
ORDER BY dependency.weight DESC, directDependentNode.name ASC
42+
WITH maxWeight
43+
,central
44+
,graphVizOutput
45+
,directDependentNode
46+
,dependency
47+
,collect(anotherDirectDependentNode)[0] AS firstLinkedDependentNode
48+
LIMIT 140
49+
WITH *, coalesce(dependency.weight25PercentInterfaces, dependency.weight, 1) AS weight
50+
// Use a fixed small pen width for secondary dependencies for better visibility of the more important direct dependency
51+
WITH *, "weight=" + weight + "; penwidth=0.2" AS edgeAttributes
52+
WITH *, "\"" + directDependentNode.name + "\" -> \"" + firstLinkedDependentNode.name + "\"" AS directDependenciesEdge
53+
WITH *, collect(directDependenciesEdge + " [" + edgeAttributes + "]") AS directDependenciesEdges
54+
WITH *, graphVizOutput + directDependenciesEdges AS graphVizOutput
55+
UNWIND graphVizOutput AS graphVizOutputLine
56+
RETURN DISTINCT graphVizOutputLine

‎domains/anomaly-detection/graphs/anomalyDetectionGraphVisualization.sh‎

Lines changed: 132 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,132 @@
1+
#!/usr/bin/env bash
2+
3+
# Executes selected anomaly detection Cypher queries for GraphViz visualization.
4+
# Visualizes top ranked anomaly archetypes.
5+
# Requires an already running Neo4j graph database with already scanned and analyzed artifacts.
6+
# The reports (csv, dot and svg files) will be written into the sub directory reports/anomaly-detection/{language}_{codeUnit}.
7+
8+
# Requires executeQueryFunctions.sh, visualizeQueryResults.sh, cleanupAfterReportGeneration.sh
9+
10+
# Fail on any error ("-e" = exit on first error, "-o pipefail" exist on errors within piped commands)
11+
set -o errexit -o pipefail
12+
13+
# Overrideable Constants (defaults also defined in sub scripts)
14+
REPORTS_DIRECTORY=${REPORTS_DIRECTORY:-"reports"}
15+
16+
## Get this "scripts/reports" directory if not already set
17+
# Even if $BASH_SOURCE is made for Bourne-like shells it is also supported by others and therefore here the preferred solution.
18+
# CDPATH reduces the scope of the cd command to potentially prevent unintended directory changes.
19+
# This way non-standard tools like readlink aren't needed.
20+
ANOMALY_DETECTION_GRAPHS_DIR=${REPORTS_SCRIPT_DIR:-$( CDPATH=. cd -- "$(dirname -- "${BASH_SOURCE[0]}")" && pwd -P )}
21+
#echo "anomalyDetectionGraphVisualization: ANOMALY_DETECTION_GRAPHS_DIR=${ANOMALY_DETECTION_GRAPHS_DIR}"
22+
23+
# Get the "scripts" directory by taking the path of this script and going one directory up.
24+
SCRIPTS_DIR=${SCRIPTS_DIR:-"${ANOMALY_DETECTION_GRAPHS_DIR}/../../../scripts"} # Repository directory containing the shell scripts
25+
# echo "anomalyDetectionGraphVisualization: SCRIPTS_DIR=${SCRIPTS_DIR}"
26+
27+
# Get the "scripts/visualization" directory.
28+
VISUALIZATION_SCRIPTS_DIR=${VISUALIZATION_SCRIPTS_DIR:-"${SCRIPTS_DIR}/visualization"} # Repository directory containing the shell scripts for visualization
29+
# echo "anomalyDetectionGraphVisualization: VISUALIZATION_SCRIPTS_DIR=${VISUALIZATION_SCRIPTS_DIR}"
30+
31+
# Define functions to execute cypher queries from within a given file
32+
source "${SCRIPTS_DIR}/executeQueryFunctions.sh"
33+
34+
# Runs a parametrized query, converts their results in GraphViz format and creates a Graph visualization.
35+
# Outputs (at most) 10 indexed files (for report_name="TopHub" then TopHub1, TopHub2,...) with a focused visualization of one selected node and its surroundings.
36+
#
37+
# Required Parameters:
38+
# - report_name=...
39+
# Name of the query and then also the resulting visualization file.
40+
# - template_name=...
41+
# Name of the GraphViz template gv file.
42+
# - projection_language=...
43+
# Name of the associated programming language. Examples: "Java", "Typescript"
44+
# - projection_node_label=...
45+
# Label of the nodes that will be used for the projection. Example: "Package"
46+
create_graph_visualization() {
47+
local nodeLabel
48+
nodeLabel=$( extractQueryParameter "projection_node_label" "${@}" )
49+
50+
local language
51+
language=$( extractQueryParameter "projection_language" "${@}" )
52+
53+
local report_name
54+
report_name=$( extractQueryParameter "report_name" "${@}" )
55+
56+
local template_name
57+
template_name=$( extractQueryParameter "template_name" "${@}" )
58+
59+
echo "anomalyDetectionGraphVisualization: $(date +'%Y-%m-%dT%H:%M:%S%z') Creating ${language} ${nodeLabel} ${report_name} visualizations with template ${template_name}..."
60+
61+
local detail_report_directory_name="${language}_${nodeLabel}"
62+
local detail_report_directory="${FULL_REPORT_DIRECTORY}/${detail_report_directory_name}/GraphVisualizations"
63+
mkdir -p "${detail_report_directory}"
64+
65+
for index in {1..5}; do
66+
# Query Graph data
67+
local resultFileName="${detail_report_directory}/${report_name}${index}"
68+
local queryResultFile="${resultFileName}.csv"
69+
execute_cypher "${ANOMALY_DETECTION_GRAPHS_DIR}/${report_name}.cypher" "${@}" "projection_node_rank=${index}" > "${queryResultFile}" || true
70+
71+
# Remove empty files
72+
# Note: Afterwards, detail_report_directory might be deleted as well.
73+
# In that case the image generation is finished and the loop needs to be terminated.
74+
source "${SCRIPTS_DIR}/cleanupAfterReportGeneration.sh" "${detail_report_directory}"
75+
# Stop generation as soon as the first query result is empty or the directory is deleted.
76+
if [ ! -f "${queryResultFile}" ] ; then
77+
break;
78+
fi
79+
80+
# Generate svg image using GraphViz
81+
source "${VISUALIZATION_SCRIPTS_DIR}/visualizeQueryResults.sh" "${queryResultFile}" --template "${ANOMALY_DETECTION_GRAPHS_DIR}/${template_name}.template.gv"
82+
83+
# Clean up after graph visualization image generation:
84+
rm -rf "${queryResultFile}" # Remove query result
85+
# Collect graphviz files in a "graphviz" sub directory
86+
mkdir -p "${detail_report_directory}/graphviz"
87+
mv -f "${resultFileName}.gv" "${detail_report_directory}/graphviz"
88+
89+
# Create visualization reference Markdown file to be embeddable in main Markdown report
90+
if [ "${index}" == "1" ]; then
91+
{
92+
echo ""
93+
echo "##### ${language} ${nodeLabel} - ${report_name} Graph Visualizations"
94+
echo ""
95+
} > "${detail_report_directory}/VisualizationsReference.md"
96+
fi
97+
echo "![${report_name} ${index}](./${detail_report_directory_name}/GraphVisualizations/${report_name}${index}.svg)" >> "${detail_report_directory}/VisualizationsReference.md"
98+
done
99+
}
100+
101+
# Run queries, outputs their results in GraphViz format and create Graph visualizations.
102+
#
103+
# Required Parameters:
104+
# - projection_language=...
105+
# Name of the associated programming language. Examples: "Java", "Typescript"
106+
# - projection_node_label=...
107+
# Label of the nodes that will be used for the projection. Example: "Package"
108+
anomaly_detection_graph_visualization() {
109+
create_graph_visualization "report_name=TopHub" "template_name=TopCentral" "${@}"
110+
create_graph_visualization "report_name=TopBottleneck" "template_name=TopCentral" "${@}"
111+
}
112+
113+
114+
# Create report directory
115+
REPORT_NAME="anomaly-detection"
116+
FULL_REPORT_DIRECTORY="${REPORTS_DIRECTORY}/${REPORT_NAME}"
117+
mkdir -p "${FULL_REPORT_DIRECTORY}"
118+
119+
# Query Parameter key pairs for projection and algorithm side
120+
QUERY_NODE="projection_node_label"
121+
QUERY_LANGUAGE="projection_language"
122+
123+
# -- Detail Reports for each code type -------------------------------
124+
125+
anomaly_detection_graph_visualization "${QUERY_NODE}=Artifact" "${QUERY_LANGUAGE}=Java"
126+
anomaly_detection_graph_visualization "${QUERY_NODE}=Package" "${QUERY_LANGUAGE}=Java"
127+
anomaly_detection_graph_visualization "${QUERY_NODE}=Type" "${QUERY_LANGUAGE}=Java"
128+
anomaly_detection_graph_visualization "${QUERY_NODE}=Module" "${QUERY_LANGUAGE}=Typescript"
129+
130+
# ---------------------------------------------------------------
131+
132+
echo "anomalyDetectionGraphVisualization: $(date +'%Y-%m-%dT%H:%M:%S%z') Successfully finished."

‎scripts/visualization/visualizeQueryResults.sh‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ echo "visualizeQueryResults: VISUALIZATION_SCRIPTS_DIR=${VISUALIZATION_SCRIPTS_D
1717
# Read the first unnamed input argument containing the version of the project
1818
inputCsvFileName=""
1919
case "${1}" in
20-
"--"*) ;; # Skipping named command line options to forward them later to the "analyze" command
20+
"--"*) ;; # Skipping named command line options to forward them later to the "convertQueryResultCsvToGraphVizDotFile" command
2121
*)
2222
inputCsvFileName="${1}"
2323
shift || true

0 commit comments

Comments
 (0)