The invention discloses a malicious
software attack detection method based on graph
deep learning, which comprises the following steps: defining space event graphs of normal
software and known malicious
software, and constructing a computer internal software space
graph model; calculating the weight of the software space
graph model, and quantifying the
event risk; designing an event prediction model based on graph
deep learning, and predicting a possible access event of the software in the next step; and a risk early warning and
cloud processing method is designed, early warning is initiated for suspicious access events of software, and risk
processing is carried out. According to the method, a computer internal software space
graph model is constructed, event risks are quantified, a multi-layer graph convolutional network is introduced for malicious software detection, and multi-layer feature representation is performed on the structure and behavior of malicious software, so that information in data is more comprehensively mined, and the detection effect is improved; the method has the advantages that
modes and features in data are automatically learned, high adaptability is achieved, malicious software variants and novel
threat changes can be adapted, better
interpretability is achieved, and high performance is still achieved for complex data.