<p>As the complexity of computer networks continues to rise, the number of security vulnerabilities and problems will also increase. Typical intrusion detection systems may struggle to detect complex attacks. The purpose of this study is to provide a reliable intrusion detection system based on machine learning and Graph Neural Networks to address the issues stated above. Identification of communication channels, links, and patterns can be achieved through graph-structural modelling of network topologies. As a result, the detection and classification of assaults were enhanced. It employs a one-of-a-kind GNN design that incorporates attention mechanisms to monitor network evolution and prioritize essential links. Integration across network topology and geographic information is a means to accomplish these objectives. Using benchmark datasets such as NSL-KDD and CICIDS2017, the proposed GNN-IDS demonstrated superior performance in terms of detection precision, number of intrusions detected, and false-positive rate compared to the most advanced approaches currently available. According to the research findings, GNN-IDS can identify new vulnerabilities and attack vectors, making it a scalable, practical, and real-time network security monitoring tool.</p>

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Network topology security analysis and attack detection based on graph neural networks

  • Zhenhua Yang,
  • Minghong Yang,
  • Qiwen Yang

摘要

As the complexity of computer networks continues to rise, the number of security vulnerabilities and problems will also increase. Typical intrusion detection systems may struggle to detect complex attacks. The purpose of this study is to provide a reliable intrusion detection system based on machine learning and Graph Neural Networks to address the issues stated above. Identification of communication channels, links, and patterns can be achieved through graph-structural modelling of network topologies. As a result, the detection and classification of assaults were enhanced. It employs a one-of-a-kind GNN design that incorporates attention mechanisms to monitor network evolution and prioritize essential links. Integration across network topology and geographic information is a means to accomplish these objectives. Using benchmark datasets such as NSL-KDD and CICIDS2017, the proposed GNN-IDS demonstrated superior performance in terms of detection precision, number of intrusions detected, and false-positive rate compared to the most advanced approaches currently available. According to the research findings, GNN-IDS can identify new vulnerabilities and attack vectors, making it a scalable, practical, and real-time network security monitoring tool.