E-GraphSAGE: A Graph Neural Network based Intrusion Detection System for IoT
release_tvjjjufp6bglpnm23645rxb3he
by
Wai Weng Lo, Siamak Layeghy, Mohanad Sarhan, Marcus Gallagher, Marius Portmann
2022
Abstract
This paper presents a new Network Intrusion Detection System (NIDS) based on
Graph Neural Networks (GNNs). GNNs are a relatively new sub-field of deep
neural networks, which can leverage the inherent structure of graph-based data.
Training and evaluation data for NIDSs are typically represented as flow
records, which can naturally be represented in a graph format. In this paper,
we propose E-GraphSAGE, a GNN approach that allows capturing both the edge
features of a graph as well as the topological information for network
intrusion detection in IoT networks. To the best of our knowledge, our proposal
is the first successful, practical, and extensively evaluated approach of
applying GNNs on the problem of network intrusion detection for IoT using
flow-based data. Our extensive experimental evaluation on four recent NIDS
benchmark datasets shows that our approach outperforms the state-of-the-art in
terms of key classification metrics, which demonstrates the potential of GNNs
in network intrusion detection, and provides motivation for further research.
In text/plain
format
Archived Files and Locations
application/pdf 993.4 kB
file_5q4ob3l2wfazxo6mgkujixqyka
|
arxiv.org (repository) web.archive.org (webarchive) |
2103.16329v8
access all versions, variants, and formats of this works (eg, pre-prints)