Network Security Anomaly Node Detection Based on Graph Neural Network and Attention Mechanism

Network Security Anomaly Node Detection Based on Graph Neural Network and Attention Mechanism

연구 분야: Networking

학회: Journal of Network and Systems Management

Protecting networks from malicious access is a highly challenging task. Identifying and detecting anomalous paths can effectively filter out potential network threats. Despite extensive research in this field, the advent of new network technologies and the increase in connected devices have led to more diverse network attacks. Traditional anomaly detection methods struggle to capture complex relationships between nodes. Graph neural networks (GNNs), with their multi-layer structures, can efficiently extract multi-attribute features of nodes. We propose an efficient method for anomalous path detection. By incorporating a multi-head attention mechanism into GNNs, we dynamically adjust node weights to capture complex dependencies. To accurately identify anomalous nodes, we also designed a new threat evaluation scoring formula, enhancing the robustness and accuracy of anomaly detection. Experimental results on the CIC-IDS-2017 dataset show that our model achieved nearly 100% accuracy and the fastest response time. Compared with previous work, our model provides faster decision-making and significantly improved evaluation performance. Our research demonstrates the potential of GNNs and multi-head attention mechanisms in network security, offering strong support for addressing increasingly complex network threats.