Anomaly Detection in OKTA Logs using Autoencoders

Fuente: arXiv
Enregistré dans:
Détails bibliographiques
Auteurs principaux: Cain, Jericho, Beadles, Hayden, Venkatesan, Karthik
Format: Preprint
Publié: 2024
Sujets:
Accès en ligne:
Tags: Ajouter un tag
Pas de tags, Soyez le premier à ajouter un tag!
_version_ 1866913576405434368
author Cain, Jericho
Beadles, Hayden
Venkatesan, Karthik
author_facet Cain, Jericho
Beadles, Hayden
Venkatesan, Karthik
contents Okta logs are used today to detect cybersecurity events using various rule-based models with restricted look back periods. These functions have limitations, such as a limited retrospective analysis, a predefined rule set, and susceptibility to generating false positives. To address this, we adopt unsupervised techniques, specifically employing autoencoders. To properly use an autoencoder, we need to transform and simplify the complexity of the log data we receive from our users. This transformed and filtered data is then fed into the autoencoder, and the output is evaluated.
format Preprint
id arxiv_https___arxiv_org_abs_2411_07314
institution arXiv
publishDate 2024
record_format arxiv
spellingShingle Anomaly Detection in OKTA Logs using Autoencoders
Cain, Jericho
Beadles, Hayden
Venkatesan, Karthik
Machine Learning
Cryptography and Security
Okta logs are used today to detect cybersecurity events using various rule-based models with restricted look back periods. These functions have limitations, such as a limited retrospective analysis, a predefined rule set, and susceptibility to generating false positives. To address this, we adopt unsupervised techniques, specifically employing autoencoders. To properly use an autoencoder, we need to transform and simplify the complexity of the log data we receive from our users. This transformed and filtered data is then fed into the autoencoder, and the output is evaluated.
title Anomaly Detection in OKTA Logs using Autoencoders
topic Machine Learning
Cryptography and Security
url https://arxiv.org/abs/2411.07314