The present invention discloses a malicious behavior identification method,
system and storage medium oriented to weighted heterogeneous graphs. The method includes the following steps: constructing an inductive graph neural
network model, and the inductive graph neural
network model includes a subgraph extraction module, Multiple
feature vector generation fusion module and classification learning module;
train and learn the inductive graph neural
network model, extract subgraphs, learn potential vector representations of nodes in subgraphs, obtain multiple subgraph feature vectors corresponding to subgraphs, and multiple subgraphs Graph
feature vector fusion, the node feature vectors obtained by fusion are classified and learned in the classification learning module; the trained inductive graph neural network model is used to identify malicious behaviors. The present invention fully combines and utilizes rich topological feature information and attribute information contained in heterogeneous graphs, and on this basis, designs an inductive learning graph neural network model to complete
feature extraction and representation learning in heterogeneous graphs, and finally realize malicious behavior recognition.