Systematic Review of Graph Neural Network for Malicious Attack Detection

As cyberattacks continue to rise alongside the rapid expansion of digital systems, effective threat detection remains a critical yet challenging task. While several machine learning approaches have been proposed, the use of graph neural networks (GNNs) for cyberattack detection has not yet been syst...

Full description

Saved in:
Bibliographic Details
Main Authors: Sarah Mohammed Alshehri, Sanaa Abdullah Sharaf, Rania Abdullrahman Molla
Format: Article
Language:English
Published: MDPI AG 2025-06-01
Series:Information
Subjects:
Online Access:https://www.mdpi.com/2078-2489/16/6/470
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1849472419469721600
author Sarah Mohammed Alshehri
Sanaa Abdullah Sharaf
Rania Abdullrahman Molla
author_facet Sarah Mohammed Alshehri
Sanaa Abdullah Sharaf
Rania Abdullrahman Molla
author_sort Sarah Mohammed Alshehri
collection DOAJ
description As cyberattacks continue to rise alongside the rapid expansion of digital systems, effective threat detection remains a critical yet challenging task. While several machine learning approaches have been proposed, the use of graph neural networks (GNNs) for cyberattack detection has not yet been systematically explored in depth. This paper presents a systematic literature review (SLR) that analyzes 28 recent academic studies published between 2020 and 2025, retrieved from major databases including IEEE, ACM, Scopus, and Springer. The review focuses on evaluating how GNN models are applied in detecting various types of attacks, particularly those targeting IoT environments, web services, phishing, and network traffic. Studies were classified based on the type of dataset, GNN model architecture, and attack domain. Additionally, key limitations and future research directions were extracted and analyzed. The findings provide a structured comparison of current methodologies and highlight gaps that warrant further exploration. This review contributes a focused perspective on the potential of GNNs in cybersecurity and offers insights to guide future developments in the field.
format Article
id doaj-art-a4debcdc15504b3a991871364bdda216
institution Kabale University
issn 2078-2489
language English
publishDate 2025-06-01
publisher MDPI AG
record_format Article
series Information
spelling doaj-art-a4debcdc15504b3a991871364bdda2162025-08-20T03:24:33ZengMDPI AGInformation2078-24892025-06-0116647010.3390/info16060470Systematic Review of Graph Neural Network for Malicious Attack DetectionSarah Mohammed Alshehri0Sanaa Abdullah Sharaf1Rania Abdullrahman Molla2Computer Science Department, King Abdulaziz University, Jeddah 21589, Saudi ArabiaComputer Science Department, King Abdulaziz University, Jeddah 21589, Saudi ArabiaComputer Science Department, King Abdulaziz University, Jeddah 21589, Saudi ArabiaAs cyberattacks continue to rise alongside the rapid expansion of digital systems, effective threat detection remains a critical yet challenging task. While several machine learning approaches have been proposed, the use of graph neural networks (GNNs) for cyberattack detection has not yet been systematically explored in depth. This paper presents a systematic literature review (SLR) that analyzes 28 recent academic studies published between 2020 and 2025, retrieved from major databases including IEEE, ACM, Scopus, and Springer. The review focuses on evaluating how GNN models are applied in detecting various types of attacks, particularly those targeting IoT environments, web services, phishing, and network traffic. Studies were classified based on the type of dataset, GNN model architecture, and attack domain. Additionally, key limitations and future research directions were extracted and analyzed. The findings provide a structured comparison of current methodologies and highlight gaps that warrant further exploration. This review contributes a focused perspective on the potential of GNNs in cybersecurity and offers insights to guide future developments in the field.https://www.mdpi.com/2078-2489/16/6/470deep learningmachine learninggraph neural networksystematic literature review
spellingShingle Sarah Mohammed Alshehri
Sanaa Abdullah Sharaf
Rania Abdullrahman Molla
Systematic Review of Graph Neural Network for Malicious Attack Detection
Information
deep learning
machine learning
graph neural network
systematic literature review
title Systematic Review of Graph Neural Network for Malicious Attack Detection
title_full Systematic Review of Graph Neural Network for Malicious Attack Detection
title_fullStr Systematic Review of Graph Neural Network for Malicious Attack Detection
title_full_unstemmed Systematic Review of Graph Neural Network for Malicious Attack Detection
title_short Systematic Review of Graph Neural Network for Malicious Attack Detection
title_sort systematic review of graph neural network for malicious attack detection
topic deep learning
machine learning
graph neural network
systematic literature review
url https://www.mdpi.com/2078-2489/16/6/470
work_keys_str_mv AT sarahmohammedalshehri systematicreviewofgraphneuralnetworkformaliciousattackdetection
AT sanaaabdullahsharaf systematicreviewofgraphneuralnetworkformaliciousattackdetection
AT raniaabdullrahmanmolla systematicreviewofgraphneuralnetworkformaliciousattackdetection