GIDS-Eval: Graph-Based NIDS Benchmarks Show Major Evaluation Gaps

Mon, 14 Sep 2026 18:03:45 +0000

Engineer — Learn: Research reveals that graph-based NIDS benchmarks are largely artifacts of preprocessing and windowing choices, not detector quality — relevant if evaluating or procuring NIDS solutions, but no running system to change today.
SOC/IR — Learn: The finding that two crafted edges achieve full evasion against multiple detector-dataset pairs is a meaningful signal about coverage gaps in graph-based NIDS; useful context when assessing your network detection stack’s real-world reliability, though no detection tuning is actionable from this paper alone.
Leader — Skip

Network-Intrusion-Detection on CuraSec