End-To-End Anomaly Detection for Identifying Malicious Cyber Behavior through NLP-Based Log Embeddings
Rule-based IDS (intrusion detection systems) are being replaced by more robust neural IDS, which demonstrate great potential in the field of Cybersecurity. However, these ML approaches continue to rely on ad-hoc feature engineering techniques, which lack the capacity to vectorize inputs in ways that are fully relevant to the discovery of anomalous cyber activity. We propose a deep end-to-end framework with NLP-inspired components for identifying potentially malicious behaviors on enterprise computer networks. We also demonstrate the efficacy of this technique on the recently released DARPA OpTC data set.
Code (0)
등록된 구현이 없습니다.
Tasks
Anomaly DetectionFeature EngineeringIntrusion DetectionSimilar Papers 제목 키워드 기반
AnoGAN for Tabular Data: A Novel Approach to Anomaly Detection
Anomaly detection, a critical facet in data analysis, involves identifying patterns that deviate from expected behavior. This research addresses the complexities inherent in anomaly detection, exploring challenges and ad…
Anomaly DetectionGenerative Adversarial NetworkQuantum-Hybrid Support Vector Machines for Anomaly Detection in Industrial Control Systems
Sensitive data captured by Industrial Control Systems (ICS) play a large role in the safety and integrity of many critical infrastructures. Detection of anomalous or malicious data, or Anomaly Detection (AD), with machin…
Anomaly DetectionRobustness of ML-Enhanced IDS to Stealthy Adversaries
Intrusion Detection Systems (IDS) enhanced with Machine Learning (ML) have demonstrated the capacity to efficiently build a prototype of "normal" cyber behaviors in order to detect cyber threats' activity with greater ac…
Anomaly DetectionIntrusion DetectionAnomaly Detection via Federated Learning
Machine learning has helped advance the field of anomaly detection by incorporating classifiers and autoencoders to decipher between normal and anomalous behavior. Additionally, federated learning has provided a way for …
Anomaly DetectionFederated LearningIntrusion DetectionAdaptive-GraphSketch: Real-Time Edge Anomaly Detection via Multi-Layer Tensor Sketching and Temporal Decay
Anomaly detection in dynamic graphs is essential for identifying malicious activities, fraud, and unexpected behaviors in real-world systems such as cybersecurity and power grids. However, existing approaches struggle wi…
Intrusion DetectionBayesian InferenceAnomaly Detection