Detail publikace

Dynamic security log processing using deep learning techniques

DZADÍKOVÁ, S. SAFONOV, Y.

Originální název

Dynamic security log processing using deep learning techniques

Typ

článek ve sborníku ve WoS nebo Scopus

Jazyk

angličtina

Originální abstrakt

Recently, the number of discovered cyber attacks increases rapidly. Tools for stealing personal data, destroying systems, or controlling infrastructure become continuously sophisticated to achieve malicious aims. Companies are trying to reduce the number of risks on their assets by using various security monitoring devices and tools. SIEM solutions are used for security monitoring, allowing different logs to be correlated. They offer visibility for security teams and allow early response to attacks. The main problem of SIEM software is the implementation of log parsing, which directly influences correlation rules efficiency. Usually, the biggest limitation is parsing dynamic log structures from different event sources. The main contribution of this paper is to apply advanced deep neural networks which use attention mechanisms for efficient log content parsing and its understanding. The proposed question answering model for feature extraction from raw logs should achieve automatic log procession. Obtained results show indisputable advantages of deep attention techniques compared to the common approaches.

Klíčová slova

correlation; deep learning; log processing; meta key extraction; natural language processing; SIEM; question answering

Autoři

DZADÍKOVÁ, S.; SAFONOV, Y.

Vydáno

26. 4. 2022

Nakladatel

Brno University of Technology; The Faculty of Electrical Engineering and Communication

Místo

Brno

ISBN

978-80-214-6030-0

Kniha

Proceedings II of the 28th Conference STUDENT EEICT 2022 Selected Papers

Edice

1

Strany od

184

Strany do

189

Strany počet

4

URL

https://www.eeict.cz/eeict_download/archiv/sborniky/EEICT_2022_sbornik_2_v3.pdf

BibTex

@inproceedings{BUT177796,
  author="Slavomíra {Dzadíková} and Yehor {Safonov}",
  title="Dynamic security log processing using deep learning techniques
",
  booktitle="Proceedings II of the 28th Conference STUDENT EEICT 2022 Selected Papers",
  year="2022",
  series="1",
  pages="184--189",
  publisher="Brno University of Technology; The Faculty of Electrical Engineering and Communication",
  address="Brno",
  isbn="978-80-214-6030-0",
  url="https://www.eeict.cz/eeict_download/archiv/sborniky/EEICT_2022_sbornik_2_v3.pdf"
}