Spectral graph theory offers powerful tools for understanding graph properties through spectral signatures. This work leverages the inherent link between graph topology and spectral characteristics to enhance anomaly detection in network traffic, particularly in medical IoT networks. We introduce \(\textit{SPECTRA} \) , a spectral graph analysis technique designed to detect anomalies in dynamic and complex network structures. This method incorporates five spectral metrics, including the newly proposed BiFlowness metric derived from Singular Value Decomposition (SVD), which captures the flow dynamics within bipartite graph topologies. By combining these spectral metrics, \(\textit{SPECTRA} \) provides a comprehensive model for detecting and analyzing advanced cyberattack patterns, such as multistep intrusions, in critical systems. Focusing on hybrid topologies that integrate star and bipartite structures, this technique applies spectral analysis to evolving networks, enabling the detection of attacks (port scanning, fingerprinting) over time. Performed experiments validate the effectiveness of \(\textit{SPECTRA} \) across IoT datasets, demonstrating its superiority in identifying attack behaviors. The proposed approach aligns with the critical demands of medical IoT environments by providing a good threat detection procedure to enhance security in sensitive networks.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Spectral Graph Analysis of Bipartite Graphs for Advanced Attack Detection

  • Majed Jaber,
  • Nicolas Boutry,
  • Pierre Parrend

摘要

Spectral graph theory offers powerful tools for understanding graph properties through spectral signatures. This work leverages the inherent link between graph topology and spectral characteristics to enhance anomaly detection in network traffic, particularly in medical IoT networks. We introduce \(\textit{SPECTRA} \) , a spectral graph analysis technique designed to detect anomalies in dynamic and complex network structures. This method incorporates five spectral metrics, including the newly proposed BiFlowness metric derived from Singular Value Decomposition (SVD), which captures the flow dynamics within bipartite graph topologies. By combining these spectral metrics, \(\textit{SPECTRA} \) provides a comprehensive model for detecting and analyzing advanced cyberattack patterns, such as multistep intrusions, in critical systems. Focusing on hybrid topologies that integrate star and bipartite structures, this technique applies spectral analysis to evolving networks, enabling the detection of attacks (port scanning, fingerprinting) over time. Performed experiments validate the effectiveness of \(\textit{SPECTRA} \) across IoT datasets, demonstrating its superiority in identifying attack behaviors. The proposed approach aligns with the critical demands of medical IoT environments by providing a good threat detection procedure to enhance security in sensitive networks.