{"id":"https://openalex.org/W7138848357","doi":"https://doi.org/10.1109/globecom59602.2025.11431646","title":"MGCRL: Multi-Scale Graph Contrastive Representation Learning For Network Intrusion Detection","display_name":"MGCRL: Multi-Scale Graph Contrastive Representation Learning For Network Intrusion Detection","publication_year":2025,"publication_date":"2025-12-08","ids":{"openalex":"https://openalex.org/W7138848357","doi":"https://doi.org/10.1109/globecom59602.2025.11431646"},"language":null,"primary_location":{"id":"doi:10.1109/globecom59602.2025.11431646","is_oa":false,"landing_page_url":"https://doi.org/10.1109/globecom59602.2025.11431646","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"GLOBECOM 2025 - 2025 IEEE Global Communications Conference","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5006566571","display_name":"Raeed Al-Sabri","orcid":"https://orcid.org/0000-0002-6901-6989"},"institutions":[{"id":"https://openalex.org/I4210144839","display_name":"Hamad bin Khalifa University","ror":"https://ror.org/03eyq4y97","country_code":"QA","type":"education","lineage":["https://openalex.org/I4210144839"]}],"countries":["QA"],"is_corresponding":false,"raw_author_name":"Raeed Al-Sabri","raw_affiliation_strings":["Hamad Bin Khalifa University,Division of Information and Computing Technology, College of Science and Engineering,Doha,Qatar"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hamad Bin Khalifa University,Division of Information and Computing Technology, College of Science and Engineering,Doha,Qatar","institution_ids":["https://openalex.org/I4210144839"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5048768303","display_name":"Abdullatif Albaseer","orcid":"https://orcid.org/0000-0002-6886-6500"},"institutions":[{"id":"https://openalex.org/I4210144839","display_name":"Hamad bin Khalifa University","ror":"https://ror.org/03eyq4y97","country_code":"QA","type":"education","lineage":["https://openalex.org/I4210144839"]}],"countries":["QA"],"is_corresponding":false,"raw_author_name":"Abdullatif Albaseer","raw_affiliation_strings":["Hamad Bin Khalifa University,Division of Information and Computing Technology, College of Science and Engineering,Doha,Qatar"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hamad Bin Khalifa University,Division of Information and Computing Technology, College of Science and Engineering,Doha,Qatar","institution_ids":["https://openalex.org/I4210144839"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037234286","display_name":"Mohamed Abdallah","orcid":"https://orcid.org/0000-0002-3261-7588"},"institutions":[{"id":"https://openalex.org/I4210144839","display_name":"Hamad bin Khalifa University","ror":"https://ror.org/03eyq4y97","country_code":"QA","type":"education","lineage":["https://openalex.org/I4210144839"]}],"countries":["QA"],"is_corresponding":false,"raw_author_name":"Mohamed Abdallah","raw_affiliation_strings":["Hamad Bin Khalifa University,Division of Information and Computing Technology, College of Science and Engineering,Doha,Qatar"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hamad Bin Khalifa University,Division of Information and Computing Technology, College of Science and Engineering,Doha,Qatar","institution_ids":["https://openalex.org/I4210144839"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5121148159","display_name":"Ala Al-Fuqaha","orcid":null},"institutions":[{"id":"https://openalex.org/I4210144839","display_name":"Hamad bin Khalifa University","ror":"https://ror.org/03eyq4y97","country_code":"QA","type":"education","lineage":["https://openalex.org/I4210144839"]}],"countries":["QA"],"is_corresponding":false,"raw_author_name":"Ala Al-Fuqaha","raw_affiliation_strings":["Hamad Bin Khalifa University,Division of Information and Computing Technology, College of Science and Engineering,Doha,Qatar"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hamad Bin Khalifa University,Division of Information and Computing Technology, College of Science and Engineering,Doha,Qatar","institution_ids":["https://openalex.org/I4210144839"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I4210144839"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"3158","last_page":"3163"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.6513000130653381,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.6513000130653381,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.13740000128746033,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.02199999988079071,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.5300999879837036},{"id":"https://openalex.org/keywords/pooling","display_name":"Pooling","score":0.5184999704360962},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.4731999933719635},{"id":"https://openalex.org/keywords/discriminative-model","display_name":"Discriminative model","score":0.4609000086784363},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.45890000462532043},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.43950000405311584},{"id":"https://openalex.org/keywords/feature-learning","display_name":"Feature learning","score":0.37209999561309814},{"id":"https://openalex.org/keywords/representation","display_name":"Representation (politics)","score":0.3594000041484833}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7892000079154968},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5321000218391418},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.5300999879837036},{"id":"https://openalex.org/C70437156","wikidata":"https://www.wikidata.org/wiki/Q7228652","display_name":"Pooling","level":2,"score":0.5184999704360962},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.4731999933719635},{"id":"https://openalex.org/C97931131","wikidata":"https://www.wikidata.org/wiki/Q5282087","display_name":"Discriminative model","level":2,"score":0.4609000086784363},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.45890000462532043},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.43950000405311584},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4300999939441681},{"id":"https://openalex.org/C59404180","wikidata":"https://www.wikidata.org/wiki/Q17013334","display_name":"Feature learning","level":2,"score":0.37209999561309814},{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.3594000041484833},{"id":"https://openalex.org/C62611344","wikidata":"https://www.wikidata.org/wiki/Q1062658","display_name":"Node (physics)","level":2,"score":0.3587999939918518},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.33649998903274536},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.33379998803138733},{"id":"https://openalex.org/C100776233","wikidata":"https://www.wikidata.org/wiki/Q2532492","display_name":"Bridge (graph theory)","level":2,"score":0.30379998683929443},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3012000024318695},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.27950000762939453},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.2768999934196472},{"id":"https://openalex.org/C774472","wikidata":"https://www.wikidata.org/wiki/Q6760393","display_name":"Margin (machine learning)","level":2,"score":0.26269999146461487},{"id":"https://openalex.org/C2993807640","wikidata":"https://www.wikidata.org/wiki/Q103709453","display_name":"Attention network","level":2,"score":0.26019999384880066},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.25760000944137573},{"id":"https://openalex.org/C118505674","wikidata":"https://www.wikidata.org/wiki/Q42586063","display_name":"Encoder","level":2,"score":0.2563000023365021},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.2538999915122986},{"id":"https://openalex.org/C2779304628","wikidata":"https://www.wikidata.org/wiki/Q3503480","display_name":"Face (sociological concept)","level":2,"score":0.25040000677108765}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/globecom59602.2025.11431646","is_oa":false,"landing_page_url":"https://doi.org/10.1109/globecom59602.2025.11431646","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"GLOBECOM 2025 - 2025 IEEE Global Communications Conference","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.6571361422538757,"id":"https://metadata.un.org/sdg/10","display_name":"Reduced inequalities"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":14,"referenced_works":["https://openalex.org/W2099940443","https://openalex.org/W2789828921","https://openalex.org/W2912636151","https://openalex.org/W2945827377","https://openalex.org/W2985331920","https://openalex.org/W3036981181","https://openalex.org/W4300167448","https://openalex.org/W4312204616","https://openalex.org/W4392159286","https://openalex.org/W4396792110","https://openalex.org/W4400700586","https://openalex.org/W4402542170","https://openalex.org/W4407184757","https://openalex.org/W7133189969"],"related_works":[],"abstract_inverted_index":{"Graph":[0,85],"neural":[1],"networks":[2],"(GNNs)":[3],"have":[4],"recently":[5],"garnered":[6],"significant":[7],"attention":[8],"for":[9,223],"use":[10],"in":[11,49,203],"network":[12,23,100,206],"intrusion":[13],"detection":[14,156],"systems":[15],"(NIDS),":[16],"owing":[17],"to":[18,21,54,98,114,126,176],"their":[19,40,52],"ability":[20],"model":[22,99],"traffic":[24,112],"as":[25,59,131,161],"graphs":[26],"and":[27,51,71,198,211,238],"capture":[28,115],"complex":[29],"dependencies":[30],"between":[31],"flows.":[32],"However,":[33],"existing":[34],"GNN-based":[35],"methods":[36],"face":[37],"critical":[38],"limitations:":[39],"reliance":[41],"on":[42,219],"labeled":[43],"data,":[44],"often":[45],"scarce":[46],"or":[47],"noisy":[48],"practice,":[50],"inability":[53],"address":[55],"multi-scale":[56,178],"threats,":[57,121,159],"such":[58,130,160],"localized":[60],"node":[61,104],"anomalies":[62,200],"(e.g.,":[63,69,75],"port":[64],"scanning),":[65],"coordinated":[66,128],"subnet-work":[67],"attacks":[68],"botnets),":[70],"global":[72,142],"network-wide":[73],"campaigns":[74],"DDoS":[76],"attacks).":[77],"To":[78],"bridge":[79],"this":[80],"gap,":[81],"we":[82],"propose":[83],"Multi-Scale":[84],"Contrastive":[86],"Representation":[87],"Learning":[88],"(MGCRL),":[89],"a":[90,167,172,204],"semi-supervised":[91],"framework":[92],"that":[93,147,201,227],"hierarchically":[94],"integrates":[95],"three":[96,220],"perspectives":[97],"intrusions.":[101],"At":[102],"the":[103,141,149,153],"level,":[105,143],"MGCRL":[106,144,165,228],"constructs":[107],"semantic":[108],"subnetworks":[109],"around":[110],"individual":[111],"flows":[113],"fine-grained":[116],"behavioral":[117],"deviations.":[118],"For":[119],"subnetwork-level":[120],"it":[122],"employs":[123],"substructure-aware":[124],"pooling":[125],"identify":[127],"anomalies,":[129],"clusters":[132],"of":[133,152,157],"devices":[134],"exhibiting":[135],"synchronized":[136],"malicious":[137],"activity.":[138],"Finally,":[139],"at":[140,214],"derives":[145],"representations":[146,179],"reflect":[148],"holistic":[150],"state":[151],"network,":[154],"enabling":[155],"large-scale":[158],"distributed":[162],"malware":[163],"propagation.":[164],"couples":[166],"shared":[168],"GNN":[169],"encoder":[170],"with":[171,195],"multi-level":[173],"contrastive":[174],"loss":[175],"align":[177],"while":[180],"largely":[181],"eliminating":[182],"label":[183,236],"dependence.":[184],"It":[185],"learns":[186],"discriminative":[187],"features":[188],"from":[189],"unlabeled":[190],"traffic,":[191],"sharpens":[192],"decision":[193],"boundaries":[194],"minimal":[196],"supervision,":[197],"exposes":[199],"surface":[202],"hierarchical":[205],"context":[207],"by":[208],"contrasting":[209],"related":[210],"unrelated":[212],"nodes":[213],"each":[215],"scale.":[216],"Extensive":[217],"experiments":[218],"benchmark":[221],"datasets":[222],"multi-class":[224],"classification":[225],"show":[226],"consistently":[229],"outperforms":[230],"SOTA":[231],"methods,":[232],"particularly":[233],"under":[234],"severe":[235],"scarcity":[237],"class":[239],"imbalance.":[240]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2026-03-20T00:00:00"}