论文检索

输入标题、作者或关键词,从 954 篇学术成果中精准定位

会议来源 全部会议

机器学习与综合 AI

自然语言处理

计算机视觉

数据挖掘与 Web

多媒体与图形学

未选择时检索全部会议
支持跨会议组合检索,PDF 均跳转至官方来源
954篇论文
第 17 / 48 页

Lin Zhang, Qing Li 0005, Jingmei Zhao

Multivariate time series forecasting is fundamental to web-scale systems. However, frequency-domain forecasters face two structural challenges: (i) frequency bias, where low-amplitude yet informative temporal cues are often submerged in noise and neglected during training; (ii) spectral degradation, where standard neural transformations distort high-amplitude periodic structures, thereby weakening the predictive signal. To address both issues, we propose GFMixer, a decoupled dual-path architecture. GFMixer first applies a Temporal Gradient Block (TGB) to capture low-amplitude information through adaptive selection based on temporal-geometric evidence. Subsequently, a Fourier-Aware Attention Block (FAB) represents high-amplitude, multi-frequency information to mitigate spectral degradation. Finally, both information streams are integrated via time-aligned residual connections within a Gradient Aggregation Block (GAB) for the final forecasting task. Extensive evaluations across seven standard benchmarks (ETT, Weather, Electricity, and Traffic) demonstrate GFMixer's superiority, securing 37 first-place rankings and the lowest average MSE overall. Beyond standalone performance, GFMixer serves as a versatile plug-and-play module that consistently enhances mainstream backbones. Code is available at: https://github.com/superlin30/GFMixer.

Zhongxian Liang, Qilong Shi, Xiyan Liang, Zihan Li, Wenjun Li 0004, Tong Yang 0003, Yangyang Wang 0001, Mingwei Xu 0001, Weizhe Zhang

In the modern internet, with the proliferation of real-time applications such as online gaming and video conferencing, the timely detection of network jitter has become a critical task in network measurement. Network jitter is defined as the abrupt fluctuations in packet inter-arrival times within network flows, which severely degrade the Quality of Service for these applications. Traditional jitter detection methods primarily focus on macro-level end-to-end or hop-by-hop latency variations, neglecting the fine-grained jitter that occurs within specific flows. In this paper, we present JitterSketch, the first sketch-based algorithm specifically designed for detecting jittery flows. JitterSketch employs a novel three-stage structure to efficiently filter out infrequent and stable flows, thereby identifying and reporting the jittery flows that have the most significant impact on network quality. Extensive experiments demonstrate that JitterSketch achieves an improvement of up to 50 percentage points in both recall and precision rates compared to baseline solutions, while maintaining high processing throughput. Furthermore, we deployed JitterSketch in a QoS simulation system, where it yielded significant improvements in QoS.

Zhibo Zhang 0009, Jianjun Li 0010, Zhiyuan Ma 0005

Multimodal dialogue emotion recognition seeks to integrate information from text, audio, and video to accurately determine the emotional state of each utterance. However, prevailing approaches often depend on fixed fusion strategies, failing to account for quality variations across modalities. Consequently, noise from less informative modalities can degrade overall performance. Moreover, most models treat utterances as independent units for static classification, overlooking the dynamic evolution of emotions throughout a dialogue. To overcome these limitations, we propose MIDE, a novel approach that leverages mutual information enhancement and dynamic modality slection for multimodal emotion recognition. Our approach dynamically selects high-quality modality pairs for fusion, minimizing interference from noisy or redundant sources. Specifically, it employs mutual information maximization to achieve cross-modal semantic alignment and incorporates an autonomous modality selection mechanism to assess inter-modal compatibility. Furthermore, an emotion transition prediction module, implemented with a Gated Recurrent Unit (GRU), captures temporal emotional dependencies, enabling joint optimization of static emotion classification and dynamic emotion trajectory prediction. Extensive experiments on the IEMOCAP and MELD datasets demonstrate that MIDE significantly surpasses existing models in accuracy and robustness, highlighting its strength in adaptive fusion for complex dialogue scenarios.

Baohang Zhou, Kehui Song, Rize Jin, Yu Zhao 0043, Xuhui Sui, Xinying Qian, Xingyue Guo, Ying Zhang 0015

Multimodal information extraction (MIE) constitutes a set of essential tasks aimed at extracting structural information from Web texts with integrating images, to facilitate the structural construction of Web-based semantic knowledge. To address the expanding category set including newly emerging entity types or relations on websites, prior research proposed the zero-shot MIE (ZS-MIE) task which aims to extract unseen structural knowledge with textual and visual modalities. However, the ZS-MIE models are limited to recognizing the samples that fall within the unseen category set, and they struggle to deal with real-world scenarios that encompass both seen and unseen categories. The shortcomings of existing methods can be ascribed to two main aspects. On one hand, these methods construct representations of samples and categories within Euclidean space, failing to capture the hierarchical semantic relationships between the two modalities within a sample and their corresponding category prototypes. On the other hand, there is a notable gap in the distribution of semantic similarity between seen and unseen category sets, which impacts the generative capability of the ZS-MIE models. To overcome the above disadvantages, we delve into the generalized zero-shot MIE (GZS-MIE) task and propose the hyperbolic multimodal generative representation learning framework (HMGRL). The variational information bottleneck and autoencoder networks are reconstructed with hyperbolic space for modeling the multi-level hierarchical semantic correlations among samples and prototypes. Furthermore, the proposed model is trained with the unseen samples generated by the decoder, and we introduce the semantic similarity distribution alignment loss to enhance the model's generalization performance. Experimental evaluations on two benchmark datasets underscore the superiority of HMGRL compared to existing baseline methods.

Liwei Qian, Hang Zhang 0008, Yiheng Wu, Yanmin Li, Mengna Zhu, Lihua Liu 0002, Jibing Wu

Using Web Mining and Content Analysis to find and understand clues from the massive amount of unstructured text online is very important for predicting future events and providing early risk warnings in important fields like finance and public safety. While Large Language Models (LLMs) exhibit potential in processing and understanding text, current text-based event prediction faces two primary challenges: first, an insufficient utilization of potential information within the text, such as causal relationships and latent associations, and second, limited predictive reliability constrained by issues like the LLM's own ability and hallucinations. To address these challenges, we propose a novel event prediction framework, Bidirectional Reasoning with Self-Correction (BRSC). BRSC comprises two complementary reasoning dimensions: temporal deductive reasoning, which analyzes the trajectory of historical events along the timeline to enable accurate trend extrapolation, and synchronic associative reasoning, which deeply mines details and latent connections from documents within a specific time window to extended semantic information. In addition, we use a self-correction mechanism that identifies and rectifies potential hallucinations and errors during the reasoning process. Extensive experiments on international relations event prediction demonstrate that BRSC achieves significant improvements over several leading LLM-based methods.

Yuanzhen Hao, Desheng Wu

Identifying central claims from long documents is a fundamental yet challenging task in automated fact-checking pipelines. Manual extraction at the document level is costly and requires domain expertise, while existing automatic methods for claim extraction and evaluation tend to overlook critical dimensions that human fact-checkers consider essential for determining claim quality. In this paper, we propose a novel Human Value-Aligned framework that enables zero-shot document-level claim extraction and evaluation by aligning with expert preferences. We first elicit a structured set of Human Value Alignment (HVA) dimensions from expert annotations and incorporate them into prompt design, instructing large language models (LLMs) to extract high-quality claims that align with expert values. To assess the quality of extracted claims, we further introduce an LLM-based automatic evaluator that scores claims across HVA dimensions and quantifies alignment with expert-written claims. Furthermore, we propose a multi-level agreement metric to evaluate the reliability of automatic HVA evaluator. Experiment results show that our method significantly improves central claim extraction performance, achieving state-of-the-art chrF and P@N scores. Moreover, the proposed HVA evaluator achieves high agreement with human judgments and offers interpretable dimension-level assessments of extracted claims. The HVA framework establishes a reliable and scalable way for human-aligned document-level claim extraction and evaluation in real-world scenarios.

Mingming Zhang, Pengfei Shi, Junbo Zhao 0002, Ningtao Wang, Feng Zhao, Guandong Sun, Yulin Kang, Xing Fu, Zhiqing Xiao, Weiqiang Wang 0002 等

Predictive modeling on web-scale tabular data presents significant scalability challenges for industrial applications, often involving billions of instances and hundreds of heterogeneous numerical features. The inherent complexities of these features—characterized by anisotropy, heavy-tailed distributions, and non-stationarity—not only impose bottlenecks on the training efficiency and scalability of mainstream models like Gradient Boosting Decision Trees (GBDTs), but also compel practitioners into laborious, inefficient, and expert-dependent manual feature engineering. To systematically address this challenge, we introduce KMLP, a novel hybrid deep architecture. KMLP synergistically integrates a shallow Kolmogorov-Arnold Network (KAN) as a front-end with a Gated Multilayer Perceptron (gMLP) as the backbone. The KAN front-end leverages its learnable activation functions to automatically model complex non-linear transformations for each input feature in an end-to-end manner, thereby automating feature representation learning. Subsequently, the gMLP backbone efficiently captures high-order interactions among these refined representations. Extensive experiments on multiple public benchmarks and an ultra-large-scale industrial web dataset with billions of samples demonstrate that KMLP achieves state-of-the-art (SOTA) performance. Crucially, our findings reveal that KMLP's performance advantage over strong baselines like GBDTs becomes more pronounced as the data scale increases. This validates KMLP as a scalable and adaptive deep learning paradigm, offering a promising path forward for modeling large-scale, dynamic web tabular data.

Youheng Bai, Mingliang Hou, Teng Guo 0002, Zitao Liu 0001, Weiqi Luo 0002

Knowledge tracing (KT) aims to personalize online education on large-scale web-based platforms by modeling students' evolving knowledge states from their interaction sequences. However, most KT models rely on a single encoder architecture (e.g., self-attention or RNN), with fixed inductive biases that fails to capture the diversity of learning behaviors. Specifically, student learning unfolds across multiple timescales, and interaction sequences contain diverse frequency components ranging from short-term variations to long-term trends. Our data-driven analysis reveals that existing encoders exhibit characteristic frequency biases (e.g., self-attention tends to emphasize low-frequency patterns), highlighting the limitations of any single architecture. To address this problem, we propose FA-KT, a frequency-aware mixture of heterogeneous experts framework. FA-KT combines self-attention, Mamba, CNN, and LSTM experts, each with complementary frequency biases. A frequency-aware router analyzes each sequence's frequency characteristics and adaptively combines experts to create dynamic, personalized encoders for individual students. Across five benchmark datasets, FA-KT consistently outperforms 20 strong KT baselines in predicting future performance. Code is available at https://pykt.org/.

Chaoqun Cui, Shijing Wang, Liangbin Huang, Qingqing Gu, Zhaolong Huang, Xiao Zeng, Wenji Mao

Interlingual subtitling, which translates subtitles of visual media into a target language, is essential for entertainment localization but has not yet been explored in machine translation. Although Large Language Models (LLMs) have significantly advanced the general capabilities of machine translation, the distinctive characteristics of subtitle texts pose persistent challenges in interlingual subtitling, particularly regarding semantic coherence, pronoun and terminology translation, and translation expressiveness. To address these issues, we present Hermes, an LLM-based automated subtitling framework. Hermes integrates three modules: Speaker Diarization, Terminology Identification, and Expressiveness Enhancement, which effectively tackle the above challenges. Experiments demonstrate that Hermes achieves state-of-the-art diarization performance and generates expressive, contextually coherent translations, thereby advancing research in interlingual subtitling.

Weiyi Yang, Richong Zhang, Junfan Chen 0001, Jiawei Sheng, Lihong Wang

Generalized Category Discovery (GCD) is a critical task in open-world computing scenarios, aiming to automatically classify partially labeled data by recognizing both known and novel categories. However, existing GCD methods usually suffer from inherent bias toward known categories due to the exclusive pre-training on them and the absence of labeled data of novel categories. This bias can lead to significant misclassification and clustering errors for novel categories. Although recent approaches leverage pseudo-label training and contrastive learning to address this, they still lack explicit supervision to disentangle novel and known categories, resulting in performance bottlenecks. To address these limitations, we propose an Expectation-Maximization-driven Contrastive Disentanglement (EMCD) framework designed to explicitly disentangle novel and known categories. We particularly formulate the identification of novel categories as a latent variable estimation problem. Specifically, it incorporates an EM-disentangling regularization to softly identify novel category samples and a consistency regularization to enhance generalization. In addition, we leverage dual contrastive constraints, including a cluster-sample contrastive constraint and a sample-sample contrastive contrastive, to pull close samples of novel categories while pushing apart ambiguous samples near decision boundaries. Empirical results on 3 commonly used datasets demonstrate that our model is effective and outperforms previous state-of-the-art methods. Our code is available at https://github.com/YWY-only/EMCD.

Jie Li, Jinrui Wang, Linmei Hu, Yuqiu Deng

The rapid spread of online misinformation poses a serious threat to public trust and social stability, making automatic fake news detection increasingly critical. In this work, we propose a novel retrieval-augmented fake news detection framework, Triple-R (Rewriting, Retrieval, and iterative Refinement), which emphasizes optimizing the retrieval query. Unlike prior retrieval-augmented methods that adapt either the retriever or the verification module, often overlooking the gap between news text and the evidence needed for verification, our approach focuses on adapting the search query to retrieve the most relevant evidence. Specifically, we employ a small language model as a trainable query rewriter, optimized via reinforcement learning with feedback from a frozen LLM-based fake news detector, to transform the original news text into effective retrieval queries. To further enhance evidence relevance, we introduce an iterative query refinement mechanism, which progressively updates rewritten queries based on previously retrieved results. Finally, the original news text and the evidence retrieved through refined queries are integrated for verification. Experiments on two real-world datasets demonstrate consistent improvements, validating the effectiveness of our approach.

Zhaodan Zhang, Jin Zhang 0029, Jiafeng Guo

Zero-shot stance detection (ZSSD) aims to classify stances towards previously unseen targets without direct supervision on those topics during training. While recent approaches have explored various strategies, they often suffer from limited linguistic diversity or unstable semantic representations, restricting generalization to new domains. To address these challenges, we propose DPSD , a dynamic framework that integrates LLM-assisted data augmentation, multi-granularity feature fusion with contrastive learning, and adaptive prototype updating. Our method enriches the training data with both diverse targets and stylistically varied texts. A gate-controlled fusion mechanism combines deep contextualized features from BERT with shallow lexical patterns via TF-IDF, while contrastive learning refines the feature space by pulling similar instances closer and pushing dissimilar ones apart, thereby improving representation discriminability. Furthermore, we introduce a sliding-window prototype pool that dynamically maintains class-specific prototypes while preserving historical knowledge, ensuring stable and interpretable inference over time. We also incorporate LLM-calibrated semantic similarity as an auxiliary scorer for controlled reasoning. Experimental results on three benchmark datasets -SEM16, P-Stance, and VAST - show that DPSD achieves strong performance in various zero-shot settings, especially in cross-dataset and unseen target scenarios.

Yuanyi Song, Heyuan Huang, Qiqiang Lin, Yin Zhao, Xiangmou Qu, Jun Wang 0152, Xingyu Lou, Weiwen Liu, Zhuosheng Zhang 0001, Jun Wang 0020 等

The rapid advancement of multimodal large language models has enabled agents to operate mobile devices by directly interacting with graphical user interfaces, opening new possibilities for mobile automation. However, real-world mobile tasks are often complex and allow for multiple valid solutions. This contradicts current mobile agent evaluation standards: offline static benchmarks can only validate a single predefined ''golden path'', while online dynamic testing is constrained by the complexity and non-reproducibility of real devices, making both approaches inadequate for comprehensively assessing agent capabilities. To bridge the gap between offline and online evaluation and enhance testing stability, this paper introduces a novel graph-structured benchmarking framework. By modeling the finite states observed during real-device interactions, it achieves static simulation of dynamic behaviors. Building on this, we develop ColorBench, a benchmark focused on complex long-horizon tasks. It supports evaluation of multiple valid solutions, subtask completion rate statistics, and atomic-level capability analysis. ColorBench contains 175 tasks (74 single-app, 101 cross-app) with an average length of over 13 steps. Each task includes at least two correct paths and several typical error paths, enabling quasi-dynamic interaction.

Quyu Kong, Yixuan Zhang 0006, Yang Liu, Panrong Tong, Enqi Liu, Feng Zhou 0011

Temporal Point Processes (TPPs) have been widely used for modeling event sequences on the Web, such as user reviews, social media posts, and online transactions. However, traditional TPP models often struggle to effectively incorporate the rich textual descriptions that accompany these events, while Large Language Models (LLMs), despite their remarkable text processing capabilities, lack mechanisms for handling the temporal dynamics inherent in Web-based event sequences. To bridge this gap, we introduce Language-TPP, a unified framework that seamlessly integrates TPPs with LLMs for enhanced Web event sequence modeling. Our key innovation is a novel temporal encoding mechanism that converts continuous time intervals into specialized byte-tokens, enabling direct integration with standard language model architectures for TPP modeling without requiring TPP-specific modifications. This approach allows Language-TPP to achieve state-of-the-art performance across multiple TPP benchmarks, including event time prediction and type prediction, on real-world Web datasets spanning e-commerce reviews, social media and online Q&A platforms. More importantly, we demonstrate that our unified framework unlocks new capabilities for TPP research: incorporating temporal information improves the quality of generated event descriptions, as evidenced by enhanced ROUGE-L scores, and better aligned sentiment distributions. Through comprehensive experiments, including qualitative analysis of learned distributions and scalability evaluations on long sequences, we show that Language-TPP effectively captures both temporal dynamics and textual patterns in Web user behavior, with important implications for content generation, user behavior understanding, and Web platform applications. Code is available at https://github.com/qykong/Language-TPP.

Jiping Zhang, Hua Zhu, Hong Huang 0001, Yongkang Zhou, Kehan Yin, Bang Liu 0003

Event sequences are integral to domains such as e-commerce, social networks, and healthcare. Traditional point process models, like Poisson and Hawkes processes, are foundational but limited by rigid parametric assumptions, constraining their flexibility in complex real-world scenarios. Neural point processes offer a more adaptable alternative, but typically perform implicit sequence modeling, which does not fully exploit critical event interaction patterns and limits transparency. To address these challenges, we introduce the Explicit Interaction-aware Attention Network (EIAN), a novel model that enhances event modeling by explicitly capturing both intra-type and cross-type event interactions. Specifically, EIAN employs two key components: an intra-type temporal encoder that preserves the unique temporal dynamics within each event type, and a cross-type interaction decoder that highlights interactions across event types. Furthermore, two temporal encoding mechanisms are integrated into the interaction decoder to handle irregular inter-event intervals in diverse temporal scenarios. Extensive experiments show that EIAN consistently outperforms existing models in predictive performance and provides deeper insights into event interaction patterns, advancing both flexibility and interpretability. Our code is available at https://github.com/CGCL-codes/EIAN.git.

Soshi Kakio, Yasuko Matsubara, Ren Fujiwara, Yasushi Sakurai

Analysis and anomaly detection in event tensor streams consisting of timestamps and multiple attributes—such as communication logs (time, IP address, packet length)—are essential tasks in data mining. While existing tensor decomposition and anomaly detection methods provide useful insights, they face the following two limitations. (i) They cannot handle heterogeneous tensor streams, which comprises both categorical attributes (e.g., IP address) and continuous attributes (e.g., packet length). They typically require either discretizing continuous attributes or treating categorical attributes as continuous, both of which distort the underlying statistical properties of the data. Furthermore, incorrect assumptions about the distribution family of continuous attributes often degrade the model's performance. (ii) They discretize timestamps, failing to track the temporal dynamics of streams (e.g., trends, abnormal events), which makes them ineffective for detecting anomalies at the group level, referred to as ''group anomalies'' (e.g, DoS attacks). To address these challenges, we propose HeteroComp, a method for continuously summarizing heterogeneous tensor streams into ''components'' representing latent groups in each attribute and their temporal dynamics, and detecting group anomalies. Our method employs Gaussian process priors to model unknown distributions of continuous attributes, and temporal dynamics, which directly estimate probability densities from data. Extracted components give concise but effective summarization, enabling accurate group anomaly detection. Extensive experiments on real datasets demonstrate that HeteroComp outperforms the state-of-the-art algorithms for group anomaly detection accuracy, and its computational time does not depend on the data stream length.

Zongwei Wang 0002, Min Gao 0001, Junliang Yu, Tong Chen 0005, Chenghua Lin 0002

Misinformation on social media poses a critical threat to information credibility, as its diverse and context-dependent nature complicates detection. Large language model–empowered multi-agent systems (MAS) present a promising paradigm that enables cooperative reasoning and collective intelligence to combat this threat. However, conventional MAS suffer from an information-drowning problem, where abundant truthful content overwhelms sparse and weak deceptive cues. With full input access, agents tend to focus on dominant patterns, and inter-agent communication further amplifies this bias. To tackle this issue, we propose PAMAS, a multi-agent framework with perspective aggregation, which employs hierarchical, perspective-aware aggregation to highlight anomaly cues and alleviate information drowning. PAMAS organizes agents into three roles: Auditors, Coordinators, and a Decision-Maker. Auditors capture anomaly cues from specialized feature subsets; Coordinators aggregate their perspectives to enhance coverage while maintaining diversity; and the Decision-Maker, equipped with evolving memory and full contextual access, synthesizes all subordinate insights to produce the final judgment. Furthermore, to improve the efficiency in multi-agent collaboration, PAMAS incorporates self-adaptive mechanisms for dynamic topology optimization and routing-based inference, enhancing both efficiency and scalability. Extensive experiments on multiple benchmark datasets demonstrate that PAMAS achieves superior accuracy and efficiency, offering a scalable and trustworthy way for misinformation detection.

Jinrui Sun, Tong Jia, Minghua He, Ying Li 0012

Logs serve as a primary source of information for engineers to diagnose failures in large-scale online service systems. Log parsing, which extracts structured events from massive unstructured log data, is a critical first step for downstream tasks like anomaly detection and failure diagnosis. With advances in large language models (LLMs), leveraging their strong text understanding capabilities has proven effective for accurate log parsing. However, existing LLM-based log parsers all focus on the constant part of logs, ignoring the potential contribution of the variable part to log parsing. This constant-centric strategy brings four key problems. First, inefficient log grouping and sampling with only constant information. Second, a relatively large number of LLM invocations due to constant-based cache, leading to low log parsing accuracy and efficiency. Third, a relatively large number of consumed constant tokens in prompts leads to high LLM invocation costs. At last, these methods only retain placeholders in the results, losing the system visibility brought by variable information in logs. Facing these problems, we propose a variable-centric log parsing strategy named VarParser. Through variable contribution sampling, variable-centric parsing cache, and adaptive variable-aware in-context learning, our approach can efficiently capture the variable parts of logs and leverage their contributions to parsing. By introducing variable units, we preserve rich variable information, enhancing the integrity of log parsing results. Extensive evaluations on large-scale datasets demonstrate that VarParser achieves higher accuracy compared to existing methods, significantly improving parsing efficiency while reducing the LLM invocation costs.

Shuili Zhang, Hongzhang Mu, Wenyuan Zhang 0002, Duohe Ma, Tingwen Liu

Attribute-Specific Fashion Retrieval (ASFR) aims to improve fine-grained image retrieval by focusing on specific attributes. However, existing patch-based attention and Transformer methods often misalign with irregular attribute regions and are prone to background noise, limiting their ability to capture subtle, pixel-level microstructures. To tackle these challenges, we propose Super Fashion. , the first ASFR framework that adopts superpixel tokens within a Transformer architecture. Super Fashion initially employs an attribute-guided attention mechanism to extract attribute-related features, which in turn guide the cropping of semantically meaningful image regions. Superpixel segmentation is then leveraged on these regions to generate compact, semantically coherent superpixel tokens. By incorporating modality-specific embeddings for both attribute and superpixel tokens, the superpixel token-based Transformer facilitates adaptive interaction and fusion, thereby enhancing attribute localization and discrimination. Extensive experiments on FashionAI, DARN, and DeepFashion demonstrate relative overall MAP improvements of 1.84%, 9.27%, and 9.35% over prior SOTA. Super Fashion offers a new solution for web-based image retrieval.

Yilin Zhao, Jiawei Huang 0001, Xianshi Su, Weihe Li, Xin Li, Yan Liu, Jiacheng Xie, Qichen Su, Jin Ye 0003, Wanchun Jiang 等

Accurately detecting super host that establishes connections to a large number of distinct peers is significant for mitigating web attacks and ensuring high quality of web service. Existing sketch-based approaches estimate the number of distinct connections called flow cardinality according to full IP addresses, while ignoring the fact that a malicious or victim super host often communicates with hosts within the same subnet, resulting in high false positive rates and low accuracy. Though hierarchical-structure based approaches could capture flow cardinality in subnet, they inherently suffer from high memory usage. To address these limitations, we propose SegSketch, a segmented cardinality estimation approach that employs a lightweight halved-segment hashing strategy to infer common prefix lengths of IP addresses, and estimates cardinality within subnet to enhance detection accuracy under constrained memory size. Experiments driven by real-world traces demonstrate that, SegSketch improves F1-Score by up to 8.04× compared to state-of-the-art solutions, particularly under small memory budgets.