Graph-Structured Network Traffic Modelling for Anomaly-Based Intrusion Detection

The increasing complexity of cyber threats demands more advanced network intrusion detection systems (NIDS) capable of identifying both known and emerging attack patterns. In this study, we propose a graph-based anomaly detection approach for network intrusion detection, where network traffic is mod...

Full description

Saved in:
Bibliographic Details
Published in:Jurnal Nasional Pendidikan Teknik Informatika (JANAPATI) Vol. 14; no. 2; pp. 240 - 249
Main Authors: Pratomo, Baskoro Adi, Haykal, Muhammad Farhan, Studiawan, Hudan, Purwitasari, Diana
Format: Journal Article
Language:English
Published: Universitas Pendidikan Ganesha 09.07.2025
Subjects:
Anomaly Detection
Graph Algorithms
intrusion detection
Network
ISSN:2089-8673, 2548-4265
Online Access:Get full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:The increasing complexity of cyber threats demands more advanced network intrusion detection systems (NIDS) capable of identifying both known and emerging attack patterns. In this study, we propose a graph-based anomaly detection approach for network intrusion detection, where network traffic is modeled as graph structures capturing both attribute and topological information. Five graph anomaly detection models—DOMINANT, OCGNN, AnomalyDAE, GAE, and CONAD—are implemented and evaluated on the UNSW-NB15 dataset. The constructed graphs use info_message attributes as nodes, with edges representing sequential traffic relationships. Experimental results show that the Graph Autoencoder (GAE) and Dual Autoencoder (AnomalyDAE) models outperform other methods, achieving F1-scores of 0.8728 and 0.7939, respectively. These findings demonstrate that reconstruction-based approaches effectively capture complex network behaviors, highlighting the potential of graph-based methods to enhance the robustness and accuracy of modern NIDS. Future work will explore dynamic graph modeling, attention mechanisms, and optimization techniques to further improve detection capabilities.
ISSN:2089-8673
2548-4265
DOI:10.23887/janapati.v14i2.94959