detect DDoS attacks which not exist in training dataset using two-level open_world graph learning.