Dynamic security log processing using deep learning techniques

Simple item page
but.event.date26.04.2022cs
but.event.titleSTUDENT EEICT 2022cs
dc.contributor.authorDzadíková, Slavomíra
dc.contributor.authorSafonov, Yehor
dc.date.accessioned2022-12-06T13:21:59Z
dc.date.available2022-12-06T13:21:59Z
dc.date.issued2022cs
dc.description.abstractRecently, the number of discovered cyber attacks increases rapidly. Tools for stealing personal data, destroying systems, or controlling infrastructure become continuously sophisticated to achieve malicious aims. Companies are trying to reduce the number of risks on their assets by using various security monitoring devices and tools. SIEM solutions are used for security monitoring, allowing different logs to be correlated. They offer visibility for security teams and allow early response to attacks. The main problem of SIEM software is the implementation of log parsing, which directly influences correlation rules efficiency. Usually, the biggest limitation is parsing dynamic log structures from different event sources. The main contribution of this paper is to apply advanced deep neural networks which use attention mechanisms for efficient log content parsing and its understanding. The proposed question answering model for feature extraction from raw logs should achieve automatic log procession. Obtained results show indisputable advantages of deep attention techniques compared to the common approaches.en
dc.formattextcs
dc.format.extent184-187cs
dc.format.mimetypeapplication/pdfen
dc.identifier.citationProceedings II of the 28st Conference STUDENT EEICT 2022: Selected papers. s. 184-187. ISBN 978-80-214-6030-0cs
dc.identifier.doi10.13164/eeict.2022.184
dc.identifier.isbn978-80-214-6030-0
dc.identifier.urihttp://hdl.handle.net/11012/208633
dc.language.isoencs
dc.publisherVysoké učení technické v Brně, Fakulta elektrotechniky a komunikačních technologiícs
dc.relation.ispartofProceedings II of the 28st Conference STUDENT EEICT 2022: Selected papersen
dc.relation.urihttps://conf.feec.vutbr.cz/eeict/index/pages/view/ke_stazenics
dc.rights© Vysoké učení technické v Brně, Fakulta elektrotechniky a komunikačních technologiícs
dc.rights.accessopenAccessen
dc.subjectCorrelation, deep learning, log processing, meta key extraction, natural language processing, SIEM, question answeringen
dc.titleDynamic security log processing using deep learning techniquesen
dc.type.driverconferenceObjecten
dc.type.statusPeer-revieweden
dc.type.versionpublishedVersionen
eprints.affiliatedInstitution.departmentFakulta elektrotechniky a komunikačních technologiícs
Files
Original bundle
Now showing 1 - 1 of 1
Thumbnail Image
Name:
184_eeict_2022.pdf
Size:
1.08 MB
Format:
Adobe Portable Document Format
Description:
Download
Collections
Student EEICT 2022: Selected Papers