Auto-Labeling of Anomalies on Access Logs and Pairwise Comparison-based Validation

Jihoon Moon, Hyuk Yoon Kwon

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

Abstract

It is difficult to detect anomalous accesses only from the access log, lacking annotation and supervised learning-based models. In this paper, we propose auto-labeling methods for unlabeled access logs and present a validation method based on a pairwise comparison between them. We define two baseline methods for pairwise comparison: 1) office hour-based and 2) pattern-based methods. Then, we propose two methods based on unsupervised or semi-supervised learning: 1) iForest-based and 2) k -nearest neighbor(NN) based methods. Finally, we show that the k -NN-based method is effective in most cases.

Original languageEnglish
Title of host publicationProceedings - 2023 IEEE International Conference on Big Data and Smart Computing, BigComp 2023
EditorsHyeran Byun, Beng Chin Ooi, Katsumi Tanaka, Sang-Won Lee, Zhixu Li, Akiyo Nadamoto, Giltae Song, Young-guk Ha, Kazutoshi Sumiya, Wu Yuncheng, Hyuk-Yoon Kwon, Takehiro Yamamoto
PublisherInstitute of Electrical and Electronics Engineers Inc.
Pages351-352
Number of pages2
ISBN (Electronic)9781665475785
DOIs
StatePublished - 2023
Event2023 IEEE International Conference on Big Data and Smart Computing, BigComp 2023 - Jeju, Korea, Republic of
Duration: 13 Feb 202316 Feb 2023

Publication series

NameProceedings - 2023 IEEE International Conference on Big Data and Smart Computing, BigComp 2023

Conference

Conference2023 IEEE International Conference on Big Data and Smart Computing, BigComp 2023
Country/TerritoryKorea, Republic of
CityJeju
Period13/02/2316/02/23

Keywords

  • Auto-labeling
  • Labeling validation
  • Unlabeled access logs

Fingerprint

Dive into the research topics of 'Auto-Labeling of Anomalies on Access Logs and Pairwise Comparison-based Validation'. Together they form a unique fingerprint.

Cite this