User Behavior Analysis with RNN and Graph Neural Networks

Abstract

With the increasing amount of logs produced by nodes in CNGrid (China National Grid), traditional manual methods for user behavior analysis can no longer meet the need of daily analysis. In recent years, deep learning has shown good results in key tasks related to computer sciences, such as intrusion detection, image recognition, natural language processing and malware detection. This paper demonstrates how to apply deep learning models to user behavior analysis. To this end, this paper classifies user behavior in CNGrid and extracts a large number of user operation sequences bounded to sessions. These sequences are put into deep learning models. This paper proposes a deep learning model that combines recurrent neural network (RNN) with graph neural network (GNN) to predict the user behavior. Graph neural network can catch the hidden state of the user’s local behavior, so it can be used as preprocessing. Recurrent neural network can catch the message of time sequence. The model is built by combining GNN and RNN to acquire both advantages. In order to verify the effectiveness of the model, this paper conducts experiments of the real user behavior datasets on CNGrid and compares them with a variety of other methods. Experimental results demonstrate the effectiveness of this novel deep learning model.

Keywords

• user behavior analysis
• graph neural network (gnn)
• recurrent neural network (rnn)