NLLog system rewrites logs to language for security anomaly detection

Researchers have developed NLLog, a novel pipeline that transforms system logs into human-readable sentences for enhanced security anomaly detection. This method uses a deterministic rewriting process, TF-IDF weighting, and tree ensemble classification, achieving superior performance over baseline methods on Hadoop Distributed File System and Blue Gene/L corpora. NLLog also maintains low false-positive rates with latency suitable for security operations centers, while ablations confirm its effectiveness and highlight corpus-dependent requirements for optimal deployment. AI

影响 Enhances security operations center efficiency by providing explainable anomaly detection from system logs.

排序理由 This is a research paper detailing a new method for log analysis. [lever_c_demoted from research: ic=1 ai=1.0]

在 arXiv cs.LG 阅读 →

• AIT Alert Data Set
• Hadoop Distributed File System
• NLLog

• 论文
• 安全

AI 生成摘要 · Google Gemini · 来自 1 个来源。 我们如何撰写摘要 →