Graph Mining for Cybersecurity: A Survey
Not on the map. Why?
Abstract (arXiv)
The explosive growth of cyber attacks nowadays, such as malware, spam, and intrusions, caused severe consequences on society. Securing cyberspace has become an utmost concern for organizations and governments. Traditional Machine Learning (ML) based methods are extensively used in detecting cyber threats, but they hardly model the correlations between real-world cyber entities. In recent years, with the proliferation of graph mining techniques, many researchers investigated these techniques for capturing correlations between cyber entities and achieving high performance. It is imperative to summarize existing graph-based cybersecurity solutions to provide a guide for future studies. Therefore, as a key contribution of this paper, we provide a comprehensive review of graph mining for cybersecurity, including an overview of cybersecurity tasks, the typical graph mining techniques, and the general process of applying them to cybersecurity, as well as various solutions for different cybersecurity tasks. For each task, we probe into relevant methods and highlight the graph types, graph approaches, and task levels in their modeling. Furthermore, we collect open datasets and toolkits for graph-based cybersecurity. Finally, we outlook the potential directions of this field for future research.
Key facts. Cited by 5 papers in the map (data through 7 Oct 2026). Builds on 76 of its 250 references that are in the map. First posted on arXiv 2 Apr 2023.
Builds on
76 of 250 references.
References · 76
- 2016Semi-Supervised Classification with Graph Convolutional Networkscited by 11,282
- 2017Graph Attention Networkscited by 8,854
- 2017Inductive Representation Learning on Large Graphscited by 6,284
- 2018How Powerful are Graph Neural Networks?cited by 4,355
- 2013Efficient Estimation of Word Representations in Vector Spacecited by 4,346
- 2017Neural Message Passing for Quantum Chemistrycited by 3,460
- 2019A Comprehensive Survey on Graph Neural Networkscited by 2,906
- 2016node2vec: Scalable Feature Learning for Networkscited by 1,913
- 2018Graph Neural Networks: A Review of Methods and Applicationscited by 1,571
- 2014DeepWalk: Online Learning of Social Representationscited by 1,543
- 2019Heterogeneous Graph Attention Networkcited by 732
- 2018FastGCN: Fast Learning with Graph Convolutional Networks via Importance Samplingcited by 583
38 more
- 2015LINE: Large-scale Information Network Embeddingcited by 582
- 2017Representation Learning on Graphs: Methods and Applicationscited by 456
- 2019Deep Learning for Anomaly Detection: A Surveycited by 357
- 2019Devign: Effective Vulnerability Identification by Learning Comprehensive Program Semantics via Graph Neural Networkscited by 266
- 2017A Comprehensive Survey of Graph Embedding: Problems, Techniques and Applicationscited by 260
- 2020Enhancing Graph Neural Network-based Fraud Detectors against Camouflaged Fraudsterscited by 248
- 2020Can Graph Neural Networks Count Substructures?cited by 235
- 2017graph2vec: Learning Distributed Representations of Graphscited by 228
- 2020Generalization and Representational Limits of Graph Neural Networkscited by 217
- 2017struc2vec: Learning Node Representations from Structural Identitycited by 214
- 2017Graph Embedding Techniques, Applications, and Performance: A Surveycited by 188
- 2014Graph-based Anomaly Detection and Description: A Surveycited by 182
- 2019Anti-Money Laundering in Bitcoin: Experimenting with Graph Convolutional Networks for Financial Forensicscited by 158
- 2020Rumor Detection on Social Media with Bi-Directional Graph Convolutional Networkscited by 152
- 2021Graph-less Neural Networks: Teaching Old MLPs New Tricks via Distillationcited by 151
- 2020A Semi-supervised Graph Attentive Network for Financial Fraud Detectioncited by 150
- 2020DistDGL: Distributed Graph Neural Network Training for Billion-Scale Graphscited by 139
- 2020A Survey on Heterogeneous Graph Embedding: Methods, Techniques, Applications and Sourcescited by 126
- 2020GCAN: Graph-aware Co-Attention Networks for Explainable Fake News Detection on Social Mediacited by 108
- 2020FANG: Leveraging Social Context for Fake News Detection Using Graph Representationcited by 98
- 2020Heterogeneous Graph Neural Networks for Malicious Account Detectioncited by 95
- 2018GeniePath: Graph Neural Networks with Adaptive Receptive Pathscited by 66
- 2017Neural Network-based Graph Embedding for Cross-Platform Binary Code Similarity Detectioncited by 65
- 2019Spam Review Detection with Graph Convolutional Networkscited by 57
- 2020How to Build a Graph-Based Deep Learning Architecture in Traffic Domain: A Surveycited by 38
- 2021Federated Graph Learning -- A Position Papercited by 34
- 2021Combining Graph Neural Networks with Expert Knowledge for Smart Contract Vulnerability Detectioncited by 34
- 2018False Information on Web and Social Media: A Surveycited by 33
- 2019Network-based Fake News Detection: A Pattern-driven Approachcited by 33
- 2019Towards Federated Graph Learning for Collaborative Financial Crimes Detectioncited by 33
- 2018Scalable Graph Learning for Anti-Money Laundering: A First Lookcited by 32
- 2019Hierarchical Propagation Networks for Fake News Detection: Investigation and Exploitationcited by 32
- 2017An Attention-based Collaboration Framework for Multi-View Network Representation Learningcited by 31
- 2019Jointly embedding the local and global relations of heterogeneous graph for rumor detectioncited by 31
- 2018Deep Learning for Encrypted Traffic Classification: An Overviewcited by 27
- 2021Smart Contract Vulnerability Detection: From Pure Neural Network to Interpretable Graph Feature and Expert Pattern Fusioncited by 24
- 2019T-EDGE: Temporal WEighted MultiDiGraph Embedding for Ethereum Transaction Network Analysiscited by 19
- 2020Friend or Faux: Graph-Based Early Detection of Fake Accounts on Social Networkscited by 19
50 most cited of 76 All 76 (JSON)
Built on by
Citing papers per year: 2024: 1; 2025: 2; 2026: 2.
5 papers.
- 2025Neuro-Symbolic AI for Cybersecurity: State of the Art, Challenges, and Opportunitiescited by 2
- 2026PDFInspect: A Unified Feature Extraction Framework for Malicious Document Detectioncited by 1
- 2026AI Native Asset Intelligencecited by 1
- 2024Towards Trustworthy Web Attack Detection: An Uncertainty-Aware Ensemble Deep Kernel Learning Modelcited by 0
- 2025Heterogeneous Graph Backdoor Attackcited by 0
- 2026AI Native Asset Intelligence9 May 2026
- 2026PDFInspect: A Unified Feature Extraction Framework for Malicious Document Detection19 Jan 2026
- 2025Neuro-Symbolic AI for Cybersecurity: State of the Art, Challenges, and Opportunities8 Sep 2025
- 2025Heterogeneous Graph Backdoor Attack30 May 2025
- 2024Towards Trustworthy Web Attack Detection: An Uncertainty-Aware Ensemble Deep Kernel Learning Model10 Oct 2024