Search papers, labs, and topics across Lattice.
This paper introduces a Graph Neural Network (GNN) model for predicting network flow-level traffic (NetFlow) by modeling the graph structure and connection features. The model uses sliding windows to create heterogeneous bidirectional graphs of IP, Port, and Connection nodes, then employs the GNN to model the evolution of graph structure and connection features. Results show the model excels at identifying connection endpoints (IP and Port) compared to baselines, while maintaining competitive feature reconstruction performance.
GNNs can predict network traffic flow with surprising accuracy, particularly in pinpointing connection endpoints.
In this paper, we propose a proof-of-concept Graph Neural Network model that can successfully predict network flow-level traffic (NetFlow) by accurately modelling the graph structure and the connection features. We use sliding-windows to split the network traffic in equal-sized heterogeneous bidirectional graphs containing IP, Port, and Connection nodes. We then use the GNN to model the evolution of the graph structure and the connection features. Our approach shows superior results when identifying the Port and IP to which connections attach, while feature reconstruction remains competitive with strong forecasting baselines. Overall, our work showcases the use of GNNs for per-flow NetFlow prediction.
