Edge weight concentration overcomes node degree blindness in graph based network intrusion detection
Graph-based network intrusion detection almost universally represents attacker behavior through node-centric structural features – degree, centrality, embeddings from graph neural networks – which implicitly assume that an attacker’s identity is visible as a distinct node in the host-communication graph. We show that t...