Recent Trends in Statistical Analysis of Event Logs for Network-Wide Intrusion Detection - Télécom Paris
Communication Dans Un Congrès Année : 2020

Recent Trends in Statistical Analysis of Event Logs for Network-Wide Intrusion Detection

Résumé

Event logs are information-rich and complex data that keep track of the activity taking place in a computer network, and can therefore contain traces of malicious activity when an intrusion happens. However, such traces are scarce and buried under considerable volumes of unrelated information, making the use of event logs for intrusion detection a challenging research topic. We review some recent contributions to that area of research, focusing on the application of statistical analysis to various types of event logs collected over a computer network. Emphasis is put on the formalism used to translate the data into a collection of mathematical objects suited to statistical modelling.
Fichier principal
Vignette du fichier
paper.pdf (310.86 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-03123038 , version 1 (27-01-2021)

Identifiants

  • HAL Id : hal-03123038 , version 1

Citer

Corentin Larroche, Johan Mazel, Stéphan Clémençon. Recent Trends in Statistical Analysis of Event Logs for Network-Wide Intrusion Detection. Conference on Artificial Intelligence for Defense (CAID), Dec 2020, Rennes, France. ⟨hal-03123038⟩
277 Consultations
186 Téléchargements

Partager

More