arXiv AI September 24, 2026 By Ali Melih Kanca, Ilker Turker

Topological Signatures of Cyber-Attack Classes in Natural Visibility Graph Representations of Network Traffic

The paper explores whether different cyber‑attack classes produce distinct topological signatures when network traffic is represented as Natural Visibility Graphs (NVGs). Using the CSE‑CIC‑IDS2018 dataset, 76 traffic features were transformed into NVGs over overlapping frames, and 10 graph‑theoretic metrics were extracted, yielding 760 descriptors per frame. A multi‑branch CNN achieved 96.20% accuracy, and statistical tests revealed that 73.1% of attack‑versus‑benign comparisons were significant, with many showing large effect sizes, especially for backward‑traffic and packet‑length features linked to connectivity, clustering, and centrality.

Machine-generated by The Flow from the publisher's headline and feed description — not written or checked by a human. The full article lives at arXiv AI.

Hugging Face Trending Papers

Sep 22

Topological Signatures of Cyber-Attack Classes in Natural Visibility Graph Representations of Network Traffic

Natural Visibility Graph (NVG)-based representations provide a promising approach for capturing structural patterns in sequential network traffic. However, whether different cyber-attack classes exhib...

arXiv Machine Learning

Sep 15

Concept drift mitigation through community and spectral graph analysis for the detection of cyberattacks in network traffic

arXiv:2609.09442v2 Announce Type: replace-cross Abstract: In network traffic, legitimate behaviours and attack techniques evolve jointly - the phenomenon known as 'concept drift' [1]. Every detector...

By Julien Michel, Abdul Qadir Khan, Majed Jaber, Pierre Parrend

arXiv AI

Jun 17

Timestamp-Aware Spatio-Temporal Graph Contrastive Learning for Network Intrusion Detection

arXiv:2606. 17109v1 Announce Type: cross Abstract: Given their effectiveness in modeling the relational structure among network traffic flows, graph neural networks (GNNs) have been widely adopted in network intrusion detection systems (NIDSs).

By Jianli Dai, Guangwei Wu, Jiacheng Li, Weiping Wang, An He, Xinjun Xiao

benchmarks

arXiv Machine Learning

Aug 19

Community Concealment from Graph Neural Networks

The paper introduces FCom‑DICE, a feature‑aware perturbation method that rewires influential edges and adjusts node features to hide a target community from graph neural network (GNN) inference. It shows that concealment effectiveness depends on boundary connectivity and feature similarity, and that FCom‑DICE outperforms structure‑only DICE on synthetic and real networks such as Facebook, Wikipedia, and Bitcoin Transactions while preserving key structural and feature properties.

By Dalyapraz Manatova, Pablo Moriano, L. Jean Camp

benchmarks safety

arXiv AI

Sep 16

Repurposing Unified Topological Signatures for Graph Representation Learning

arXiv:2609.17061v1 Announce Type: cross Abstract: Message-passing Graph Neural Networks (GNNs) iteratively propagate and aggregate local neighborhood information followed by global readout to learn g...

By Sanyam Sanjay Jain, Anshika Krishnatray, Aditya Sharma, Vinti Agarwal

rag benchmarks

arXiv Statistics ML

3d ago

Barycentric subspace analysis of network-valued data

arXiv:2507.23559v2 Announce Type: replace-cross Abstract: Certain data are naturally modeled by networks or weighted graphs, be they biological networks or mobility networks. When there is no canonic...

By Elodie Maignant, Xavier Pennec, Alain Trouv\'e, Anna Calissano

rag safety

One email a morning, machine-written

Related stories

Topological Signatures of Cyber-Attack Classes in Natural Visibility Graph Representations of Network Traffic

Concept drift mitigation through community and spectral graph analysis for the detection of cyberattacks in network traffic

Timestamp-Aware Spatio-Temporal Graph Contrastive Learning for Network Intrusion Detection

Community Concealment from Graph Neural Networks

Repurposing Unified Topological Signatures for Graph Representation Learning

Barycentric subspace analysis of network-valued data