The present application relates to the technical field of
network security analysis, in particular to a network node full-
granularity anomaly detection method and
system based on attribute-enhanced sampling, which obtains an attribute-enhanced network of an original attribute network based on an attribute-enhanced manner, and generates positive and
negative sample pairs of both the original attribute network and the attribute-enhanced network through subgraph sampling of interval random walk; a full-
granularity contrast
learning network containing nodes and subgraphs, nodes and nodes, subgraphs and subgraphs, and nodes and the whole is constructed by using the positive and
negative sample pairs, so as to capture abnormal information of nodes at the subgraph level, the
node level and the global level by using the full-
granularity contrast
learning network; the abnormal value
score of each node is calculated based on the full-granularity contrast
learning network, and the abnormal nodes in the attribute network are determined according to the abnormal value
score, wherein the abnormal value
score includes node and subgraph abnormal score, node and node abnormal score, and node and global abnormal score. The present application can improve the accuracy of attribute network anomaly node detection and facilitate deployment and application in actual scenarios.