Attack Structure Matters: Causality-preserving Metrics for Provenance-based Intrusion Detection Systems
It includes both the code for calculating the proposed version of the Generalized Weisfeiler-Lehman Graph Kernel and the notebooks showing all the analysis and the Figures shown in the paper.