Natural Language Processing and Anomaly detection in Linux Sys call logs
Channel: LinuxConf [ZA]
Date: 21/11/2019

Christo Goosen

LinuxCOnf [ZA] 2019

Linux syscalls provide a excellent source of data for anomalous behaviour, but the shear volume of events is difficult to analyze. This talk looks at minimizing log noise and detecting anomalies in logs with Natural Language Processing and machine learning. The talk will try and demistify machine learning by showcasing it application in this specific case. This method is applicable to running systems, Intrusion detection systems, CI/CD logs, etc.