Authors:
Tiberiu Boros
1
;
Andrei Cotaie
1
;
Kumar Vikramjeet
2
;
Vivek Malik
2
;
Lauren Park
2
and
Nick Pachis
3
Affiliations:
1
Adobe Systems, Romania
;
2
Adobe Systems, U.S.A.
;
3
Formerly Adobe Systems, U.S.A.
Keyword(s):
Infrastructure, Machine Learning, Statistical Approach, Natural Language Processing, Labeling, Tagging, Security, Process, Process Metadata, Enriching Data, Hubble Stack, Risk Based Anomaly Detection.
Abstract:
We propose a principled method of enriching security related information for running processes. Our methodology applies to large organizational infrastructures, where information is properly collected and stored. The data we use is based on the Hubble Stack (an open-source project), but any alternative solution that provides the same type of information will suffice. Using statistical and natural language processing (NLP) methods we enrich our data with tags and we provide an analysis on how these tags can be used in Machine Learning approaches for anomaly detection.