Anomaly Detection Using Sequence Patterns

Analysis of system logs plays an important role in improving the security of IT systems. System logs are records of events and activities that take place in the system, such as logging in, running applications, accessing files, network connections, etc. Analysis of system logs can provide valuable information about user activities and behaviors, detect suspicious or unauthorised activities, and identify potential threats to system security. Analysis of system logs allows system administrators to identify incorrect or unauthorised activities that may indicate attacks or security breaches. By monitoring and analyzing logs, we can quickly detect unwanted activities, such as hacking attempts, suspicious logins, or DDoS attacks. In this chapter, the possibilities of using convolutional neural networks in the tasks of searching for approximate sequences of events in the logs of computer systems allowing for the detection of anomalies will be presented.