Not All Relations Are Equal: Relation-Balanced and Calibrated Graph Learning for Provenance-Based Intrusion Detection
RECAL is presented, an unsupervised framework using relation-balanced masked graph learning to better capture rare interaction patterns and calibrates reconstruction errors against each relation's benign error distribution to produce comparable anomaly evidence, helping distinguish attacks from benign behavior and redu...
Li-Jie Zheng, Ji He, Zhi-Wei Zhang et al.
· 0 citations