Few Edges Are Enough: Few-Shot Network Attack Detection with Graph Neural Networks - Institut supérieur d'électronique de Paris
Communication Dans Un Congrès Année : 2024

Few Edges Are Enough: Few-Shot Network Attack Detection with Graph Neural Networks

Résumé

Detecting cyberattacks using Graph Neural Networks (GNNs) has seen promising results recently. Most of the state-of-the-art models that leverage these techniques require labeled examples, hard to obtain in many real-world scenarios. To address this issue, unsupervised learning and Self-Supervised Learning (SSL) have emerged as interesting approaches to reduce the dependency on labeled data. Nonetheless, these methods tend to yield more anomalous detection algorithms rather than effective attack detection systems. This paper introduces Few Edges Are Enough (FEAE), a GNN-based architecture trained with SSL and Few- Shot Learning (FSL) to better distinguish between false positive anomalies and actual attacks. To maximize the potential of few-shot examples, our model employs a hybrid self-supervised objective that combines the advantages of contrastive-based and reconstruction-based SSL. By leveraging only a minimal number of labeled attack events, represented as attack edges, FEAE achieves competitive performance on two well-known network datasets compared to both supervised and unsupervised methods. Remarkably, our experimental results unveil that employing only 1 malicious event for each attack type in the dataset is sufficient to achieve substantial improvements. FEAE not only outperforms self-supervised GNN baselines but also surpasses some supervised approaches on one of the datasets.
Fichier sous embargo
Fichier sous embargo
0 3 26
Année Mois Jours
Avant la publication
jeudi 13 mars 2025
Fichier sous embargo
jeudi 13 mars 2025
Connectez-vous pour demander l'accès au fichier

Dates et versions

hal-04701979 , version 1 (19-09-2024)

Identifiants

Citer

Tristan Bilot, Nour El Madhoun, Khaldoun Al Agha, Anis Zouaoui. Few Edges Are Enough: Few-Shot Network Attack Detection with Graph Neural Networks. The 19th International Workshop on Security (IWSEC 2024), Sep 2024, Kyoto, Japan. pp.257--276, ⟨https://doi.org/10.1007/978-981-97-7737-2_15⟩. ⟨hal-04701979⟩
68 Consultations
1 Téléchargements

Altmetric

Partager

More