Bài báo quốc tế
Kho tri thức
/
Bài báo quốc tế
/
GT-FID: A Graph-Temporal Fusion Network for Host-Based Intrusion Detection from System Call Sequences
GT-FID: A Graph-Temporal Fusion Network for Host-Based Intrusion Detection from System Call Sequences
Đỗ Phúc Hảo
Advanced Persistent Threats (APTs) pose a significant challenge to cybersecurity, as their sophisticated
strategies often evade traditional detectors that fail to capture complex temporal and structural patterns in
system call sequences. To address this gap, we propose the Graph-Temporal Fusion Network for Intrusion
Detection (GT-FID), a novel dual-branch deep learning architecture. GT-FID synergistically integrates a Long
Short-Term Memory (LSTM) network to model time-ordered dependencies with a Graph Neural Network
(GNN) that analyzes structural relationships within dynamically constructed call graphs. Evaluated on the
public ADFA-LD dataset, GT-FID achieves a test accuracy of 0.9622 and a Macro-Averaged F1-Score of
0.95, significantly outperforming strong baselines including GRU (0.9462) and Transformer (0.9563) models.
These results demonstrate that fusing temporal and structural features provides a more robust and effective
representation for detecting complex attack patterns, establishing a promising direction for future host-based
intrusion detection systems.
Xuất bản trên:
GT-FID: A Graph-Temporal Fusion Network for Host-Based Intrusion Detection from System Call Sequences
Nhà xuất bản:
Địa điểm:
Từ khoá:
Intrusion Detection, Advanced Persistent Threat (APT), System Call Analysis, Graph Neural Network (GNN), Long Short-Term Memory (LSTM), Deep Learning
Bài báo liên quan
Optimizing Mixed-Resolution ADC Allocation Under Bit-Budget Constraints in LDPC-Coded Massive MIMO
Đặng Ngọc HùngEnhancing Medical Image Classification with Noise-Injected Multi-Head Attention
Nguyễn Năng Hùng VânMind the Gap: On the Practical Utility of SHAP for Deep Learning-Based Intrusion Detection
Đỗ Phúc Hảo