{"id":"https://openalex.org/W4410956577","doi":"https://doi.org/10.3390/info16060470","title":"Systematic Review of Graph Neural Network for Malicious Attack Detection","display_name":"Systematic Review of Graph Neural Network for Malicious Attack Detection","publication_year":2025,"publication_date":"2025-06-02","ids":{"openalex":"https://openalex.org/W4410956577","doi":"https://doi.org/10.3390/info16060470"},"language":"en","primary_location":{"id":"doi:10.3390/info16060470","is_oa":true,"landing_page_url":"https://doi.org/10.3390/info16060470","pdf_url":"https://www.mdpi.com/2078-2489/16/6/470/pdf?version=1748872743","source":{"id":"https://openalex.org/S4210219776","display_name":"Information","issn_l":"2078-2489","issn":["2078-2489"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.mdpi.com/2078-2489/16/6/470/pdf?version=1748872743","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5049552099","display_name":"Sarah Mohammed Alshehri","orcid":null},"institutions":[{"id":"https://openalex.org/I185163786","display_name":"King Abdulaziz University","ror":"https://ror.org/02ma4wv74","country_code":"SA","type":"education","lineage":["https://openalex.org/I185163786"]}],"countries":["SA"],"is_corresponding":true,"raw_author_name":"Sarah Mohammed Alshehri","raw_affiliation_strings":["Computer Science Department, King Abdulaziz University, Jeddah 21589, Saudi Arabia"],"affiliations":[{"raw_affiliation_string":"Computer Science Department, King Abdulaziz University, Jeddah 21589, Saudi Arabia","institution_ids":["https://openalex.org/I185163786"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5048191081","display_name":"Sanaa Sharaf","orcid":"https://orcid.org/0000-0003-0806-1396"},"institutions":[{"id":"https://openalex.org/I185163786","display_name":"King Abdulaziz University","ror":"https://ror.org/02ma4wv74","country_code":"SA","type":"education","lineage":["https://openalex.org/I185163786"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Sanaa Abdullah Sharaf","raw_affiliation_strings":["Computer Science Department, King Abdulaziz University, Jeddah 21589, Saudi Arabia"],"affiliations":[{"raw_affiliation_string":"Computer Science Department, King Abdulaziz University, Jeddah 21589, Saudi Arabia","institution_ids":["https://openalex.org/I185163786"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5045097682","display_name":"Rania Molla","orcid":"https://orcid.org/0000-0002-7574-611X"},"institutions":[{"id":"https://openalex.org/I185163786","display_name":"King Abdulaziz University","ror":"https://ror.org/02ma4wv74","country_code":"SA","type":"education","lineage":["https://openalex.org/I185163786"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Rania Abdullrahman Molla","raw_affiliation_strings":["Computer Science Department, King Abdulaziz University, Jeddah 21589, Saudi Arabia"],"affiliations":[{"raw_affiliation_string":"Computer Science Department, King Abdulaziz University, Jeddah 21589, Saudi Arabia","institution_ids":["https://openalex.org/I185163786"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5049552099"],"corresponding_institution_ids":["https://openalex.org/I185163786"],"apc_list":{"value":1400,"currency":"CHF","value_usd":1515},"apc_paid":{"value":1400,"currency":"CHF","value_usd":1515},"fwci":12.2299,"has_fulltext":true,"cited_by_count":8,"citation_normalized_percentile":{"value":0.98533048,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":99},"biblio":{"volume":"16","issue":"6","first_page":"470","last_page":"470"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9966999888420105,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9897000193595886,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.649887204170227},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.45875051617622375},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.45766523480415344},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.4355162978172302},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3210231065750122},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.1826067864894867}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.649887204170227},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.45875051617622375},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.45766523480415344},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.4355162978172302},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3210231065750122},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.1826067864894867}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.3390/info16060470","is_oa":true,"landing_page_url":"https://doi.org/10.3390/info16060470","pdf_url":"https://www.mdpi.com/2078-2489/16/6/470/pdf?version=1748872743","source":{"id":"https://openalex.org/S4210219776","display_name":"Information","issn_l":"2078-2489","issn":["2078-2489"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:a4debcdc15504b3a991871364bdda216","is_oa":true,"landing_page_url":"https://doaj.org/article/a4debcdc15504b3a991871364bdda216","pdf_url":null,"source":{"id":"https://openalex.org/S112646816","display_name":"SHILAP Revista de lepidopterolog\u00eda","issn_l":"0300-5267","issn":["0300-5267","2340-4078"],"is_oa":true,"is_in_doaj":true,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Information, Vol 16, Iss 6, p 470 (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.3390/info16060470","is_oa":true,"landing_page_url":"https://doi.org/10.3390/info16060470","pdf_url":"https://www.mdpi.com/2078-2489/16/6/470/pdf?version=1748872743","source":{"id":"https://openalex.org/S4210219776","display_name":"Information","issn_l":"2078-2489","issn":["2078-2489"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4410956577.pdf","grobid_xml":"https://content.openalex.org/works/W4410956577.grobid-xml"},"referenced_works_count":78,"referenced_works":["https://openalex.org/W44815768","https://openalex.org/W1544577158","https://openalex.org/W1831625788","https://openalex.org/W1861540417","https://openalex.org/W1908122868","https://openalex.org/W2016258134","https://openalex.org/W2081040353","https://openalex.org/W2136922672","https://openalex.org/W2554148185","https://openalex.org/W2607572717","https://openalex.org/W2734718015","https://openalex.org/W2767547957","https://openalex.org/W2767615048","https://openalex.org/W2783616455","https://openalex.org/W2861867928","https://openalex.org/W2885033069","https://openalex.org/W2900658014","https://openalex.org/W2919021187","https://openalex.org/W2921573932","https://openalex.org/W2929803724","https://openalex.org/W2962946486","https://openalex.org/W2964248614","https://openalex.org/W2985331920","https://openalex.org/W3005725208","https://openalex.org/W3019388769","https://openalex.org/W3032990727","https://openalex.org/W3040772530","https://openalex.org/W3043799819","https://openalex.org/W3047443805","https://openalex.org/W3082299611","https://openalex.org/W3082712634","https://openalex.org/W3085804088","https://openalex.org/W3091379954","https://openalex.org/W3095878483","https://openalex.org/W3100036790","https://openalex.org/W3103695279","https://openalex.org/W3111343554","https://openalex.org/W3117832254","https://openalex.org/W3128470182","https://openalex.org/W3128497535","https://openalex.org/W3139008799","https://openalex.org/W3152893301","https://openalex.org/W3217748719","https://openalex.org/W4205577106","https://openalex.org/W4207043127","https://openalex.org/W4213081600","https://openalex.org/W4213446467","https://openalex.org/W4225796304","https://openalex.org/W4231831409","https://openalex.org/W4281385944","https://openalex.org/W4288057716","https://openalex.org/W4289656135","https://openalex.org/W4295799447","https://openalex.org/W4312702896","https://openalex.org/W4319079546","https://openalex.org/W4320013936","https://openalex.org/W4324029729","https://openalex.org/W4324284877","https://openalex.org/W4380930638","https://openalex.org/W4382407803","https://openalex.org/W4386066755","https://openalex.org/W4388835106","https://openalex.org/W4390547902","https://openalex.org/W4390813750","https://openalex.org/W4393256640","https://openalex.org/W4394975799","https://openalex.org/W4396229148","https://openalex.org/W4399492013","https://openalex.org/W4400850302","https://openalex.org/W4402808383","https://openalex.org/W4404524465","https://openalex.org/W4405843101","https://openalex.org/W4406248372","https://openalex.org/W6638916833","https://openalex.org/W6730018140","https://openalex.org/W6745872959","https://openalex.org/W6754884518","https://openalex.org/W6853340589"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"As":[0],"cyberattacks":[1],"continue":[2],"to":[3,161],"rise":[4],"alongside":[5],"the":[6,29,108,152,166],"rapid":[7],"expansion":[8],"of":[9,31,90,110,135,154],"digital":[10],"systems,":[11],"effective":[12],"threat":[13],"detection":[14,38],"remains":[15],"a":[16,50,132,148],"critical":[17],"yet":[18,41],"challenging":[19],"task.":[20],"While":[21],"several":[22],"machine":[23],"learning":[24],"approaches":[25],"have":[26],"been":[27,42],"proposed,":[28],"use":[30],"graph":[32],"neural":[33],"networks":[34],"(GNNs)":[35],"for":[36],"cyberattack":[37],"has":[39],"not":[40],"systematically":[43],"explored":[44],"in":[45,86,156,165],"depth.":[46],"This":[47,145],"paper":[48],"presents":[49],"systematic":[51],"literature":[52],"review":[53,77,146],"(SLR)":[54],"that":[55,141],"analyzes":[56],"28":[57],"recent":[58],"academic":[59],"studies":[60],"published":[61],"between":[62],"2020":[63],"and":[64,74,100,115,121,127,138,158],"2025,":[65],"retrieved":[66],"from":[67],"major":[68],"databases":[69],"including":[70],"IEEE,":[71],"ACM,":[72],"Scopus,":[73],"Springer.":[75],"The":[76,129],"focuses":[78],"on":[79,107,151],"evaluating":[80],"how":[81],"GNN":[82,112],"models":[83],"are":[84],"applied":[85],"detecting":[87],"various":[88],"types":[89],"attacks,":[91],"particularly":[92],"those":[93],"targeting":[94],"IoT":[95],"environments,":[96],"web":[97],"services,":[98],"phishing,":[99],"network":[101],"traffic.":[102],"Studies":[103],"were":[104,125],"classified":[105],"based":[106],"type":[109],"dataset,":[111],"model":[113],"architecture,":[114],"attack":[116],"domain.":[117],"Additionally,":[118],"key":[119],"limitations":[120],"future":[122,163],"research":[123],"directions":[124],"extracted":[126],"analyzed.":[128],"findings":[130],"provide":[131],"structured":[133],"comparison":[134],"current":[136],"methodologies":[137],"highlight":[139],"gaps":[140],"warrant":[142],"further":[143],"exploration.":[144],"contributes":[147],"focused":[149],"perspective":[150],"potential":[153],"GNNs":[155],"cybersecurity":[157],"offers":[159],"insights":[160],"guide":[162],"developments":[164],"field.":[167]},"counts_by_year":[{"year":2025,"cited_by_count":8}],"updated_date":"2026-02-27T16:54:17.756197","created_date":"2025-10-10T00:00:00"}