Ranking attack graphs with graph neural networks

Authors

Liang Lu, University of WollongongFollow
Rei Safavi-Naini, University of CalgaryFollow
Markus Hagenbuchner, University of WollongongFollow
Willy Susilo, University of WollongongFollow
Jeffrey Horton, SITACS, University of WollongongFollow
Sweah Yong, University of Wollongong
Ah Chung Tsoi, Hong Kong Baptist UniversityFollow

RIS ID

31802

Publication Details

Lu, L., Safavi-Naini, R., Hagenbuchner, M., Susilo, W., Horton, J. P., Yong, S. & Tsoi, A. (2009). Ranking attack graphs with graph neural networks. Information Security Practice and Experience, 5th International Conference, ISPEC 2009 (pp. 345-359). Berlin, Germany: Springer Verlag.

Abstract

Network security analysis based on attack graphs has been applied extensively in recent years. The ranking of nodes in an attack graph is an important step towards analyzing network security. This paper proposes an alternative attack graph ranking scheme based on a recent approach to machine learning in a structured graph domain, namely, Graph Neural Networks (GNNs). Evidence is presented in this paper that the GNN is suitable for the task of ranking attack graphs by learning a ranking function from examples and generalizes the function to unseen possibly noisy data, thus showing that the GNN provides an effective alternative ranking method for attack graphs.