Runtime security monitoring by an interplay between rule matching and deep learning-based anomaly detection on logs

Antic, JanCosta, Joao PitaCernivec, AlesCankar, MatijaMartincic, TomazPotocnik, AljazRatkajec, HrvojeElguezabal, Gorka BenguriaLeligou, NellyLakka, AlexandraBoigues, Ismael TorresMorte, Eliseo Villanueva2024-07-242024-07-242023Antic , J , Costa , J P , Cernivec , A , Cankar , M , Martincic , T , Potocnik , A , Ratkajec , H , Elguezabal , G B , Leligou , N , Lakka , A , Boigues , I T & Morte , E V 2023 , Runtime security monitoring by an interplay between rule matching and deep learning-based anomaly detection on logs . in 2023 19th International Conference on the Design of Reliable Communication Networks, DRCN 2023 . 2023 19th International Conference on the Design of Reliable Communication Networks, DRCN 2023 , Institute of Electrical and Electronics Engineers Inc. , 19th International Conference on the Design of Reliable Communication Networks, DRCN 2023 , Vilanova i la Geltru , Spain , 17/04/23 . https://doi.org/10.1109/DRCN57075.2023.10108105conference9781665475983https://hdl.handle.net/11556/1472Publisher Copyright: © 2023 IEEE.In the era of digital transformation the increasing vulnerability of infrastructure and applications is often tied to the lack of technical capability and the improved intelligence of the attackers. In this paper, we discuss the complementarity between static security monitoring of rule matching and an application of self-supervised machine-learning to cybersecurity. Moreover, we analyse the context and challenges of supply chain resilience and smart logistics. Furthermore, we put this interplay between the two complementary methods in the context of a self-learning and self-healing approach.enginfo:eu-repo/semantics/openAccessRuntime security monitoring by an interplay between rule matching and deep learning-based anomaly detection on logsconference output10.1109/DRCN57075.2023.10108105anomaly detectiondeep learningmasked language modellingnatural language processingruntimesecurity monitoringself healingself learningsmart logisticssupply chain resilienceHardware and ArchitectureSafety, Risk, Reliability and QualityComputer Networks and CommunicationsSDG 9 - Industry, Innovation, and Infrastructurehttp://www.scopus.com/inward/record.url?scp=85159134927&partnerID=8YFLogxK