Automated Attribribution of Multi-Layered Threat Actor Infrastructure Using Hybrid Graph Neural Networks and Adaptive Hyperparameter Optimization

**Abstract:** This paper introduces a novel framework for automated attribution of sophisticated, multi-layered threat actor infrastructure. Existing attribution methodologies often struggle with the dynamic nature and obfuscation tactics employed by modern threat actors, particularly those operating across decentralized platforms. Our system, utilizing a hybrid Graph Neural Network (GNN) incorporating both Structural and Relational message passing, coupled with adaptive hyperparameter optimization based on Bayesian optimization, achieves a significantly improved accuracy and speed in identifying key actors and their roles within complex threat networks. The system's architecture is designed for immediate commercialization within cybersecurity threat intelligence platforms, offering quantifiable improvements in proactive defense capabilities.

Institutions

Publication Details

Journal
Zenodo (CERN European Organization for Nuclear Research)
Published
2025-08-10
DOI
https://doi.org/10.5281/zenodo.16788842
Primary Topic
Advanced Graph Neural Networks
Type
article
Field-Weighted Citation Impact
0.00
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

Automated Attribribution of Multi-Layered Threat Actor Infrastructure Using Hybrid Graph Neural Networks and Adaptive Hyperparameter Optimization

Zenodo (CERN European Organization for Nuclear Research)
Advanced Graph Neural Networks
article

Automated Attribribution of Multi-Layered Threat Actor Infrastructure Using Hybrid Graph Neural Networks and Adaptive Hyperparameter Optimization

article en

Abstract

**Abstract:** This paper introduces a novel framework for automated attribution of sophisticated, multi-layered threat actor infrastructure. Existing attribution methodologies often struggle with the dynamic nature and obfuscation tactics employed by modern threat actors, particularly those operating across decentralized platforms. Our system, utilizing a hybrid Graph Neural Network (GNN) incorporating both Structural and Relational message passing, coupled with adaptive hyperparameter optimization based on Bayesian optimization, achieves a significantly improved accuracy and speed in identifying key actors and their roles within complex threat networks. The system's architecture is designed for immediate commercialization within cybersecurity threat intelligence platforms, offering quantifiable improvements in proactive defense capabilities.

Zenodo (CERN European Organization for Nuclear Research)
Freed–Hardeman University (US)
Industry, innovation and infrastructure
Openalex Percentile: Top 75%
Advanced Graph Neural Networks
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.