Abstract:Recently, deep learning (DL)-driven intrusion detection technology has been rising gradually to reduce the economic and privacy losses caused by the dramatic increase in cyber attacks. Besides exploiting the statistical network traffic features, the inherent attack topologies are also important as they are highly associated with attack behaviors. Thus, many works use graph neural networks (GNN) to make use of them to improve the detection performance. Nevertheless, these topologies contain many isolated IPs that interact with far fewer targets than other non-isolated IPs. Due to the message-passing scheme, information from isolated IPs is less likely to be transmitted in GNN training, resulting in poor model understanding of the traffic connecting these isolated IPs. Therefore, the performance of GNN-based intrusion detection models is not satisfactory for this traffic. To address this problem, we implement a generation algorithm with traffic functionality preservation to improve the performance of GNN-based intrusion detectors by locally augmenting this type of traffic. The proposed method first converts the IP-based graph of the traffic dataset into a line graph, and then utilizes a conditional denoising diffusion probabilistic model to generate new graph snapshots to enhance the expressiveness of isolated IP in GNN message aggregation. We evaluate the performance of our method and compare it with state-of-the-art works on three datasets, i.e., NF-BoT-IoT-V2, NF-ToN-IoT-V2, and NF-CSECIC-IDS2018-V2, and the results show it achieves accuracy of 99.11%(↑0.11%), 93.84%(↑2.47%), and 97.15%(↑3.94%), respectively. Case study shows that the proposed local augmentation can improve detection performance under different isolated thresholds. Moreover, our method can alleviate the over-smoothing problem to a certain extent, and the augmented traffic also possesses better quality.

A Privacy-Preserving Graph Neural Network for Network Intrusion Detection

Devil in Disguise: Breaching Graph Neural Networks Privacy through Infiltration

Industrial Scale Privacy Preserving Deep Neural Network

Privacy-Preserving Decentralized Inference with Graph Neural Networks in Wireless Networks

Efficient Privacy Preserving Graph Neural Network for Node Classification

Privacy-Enhanced Graph Neural Network for Decentralized Local Graphs

Unveiling the potential of Graph Neural Networks for robust Intrusion Detection

A Privacy Preserving Graph Neural Networks Framework by Protecting User’s Attributes

Local Augmentation with Functionality-Preservation for Semi-Supervised Graph Intrusion Detection

Unveiling the Role of Message Passing in Dual-Privacy Preservation on GNNs

Fair and Privacy-Preserving Graph Neural Network.

Individual Fairness for Local Private Graph Neural Network

Achieving Adaptive Privacy-Preserving Graph Neural Networks Training in Cloud Environment

Privacy-Enhanced Federated GNN Inference Against Adversarial Example Attack

A Unified Framework of Graph Information Bottleneck for Robustness and Membership Privacy

Spectral Privacy Detection on Black-box Graph Neural Networks

Network Intrusion Detection Based on Graph Neural Network and Ensemble Learning

Inference Attacks Against Graph Neural Networks

P3GNN: A Privacy-Preserving Provenance Graph-Based Model for APT Detection in Software Defined Networking

A Survey on Privacy in Graph Neural Networks: Attacks, Preservation, and Applications

Releasing Graph Neural Networks with Differential Privacy Guarantees