Global-local integration for GNN-based anomalous device state detection in industrial control systems