Anomaly Detection in Certificate Transparency Logs

arXiv:2405.05206v1 Announce Type: cross
Abstract: We propose an anomaly detection technique for X.509 certificates utilizing Isolation Forest. This method can be beneficial when compliance testing with X.509 linters proves unsatisfactory, and we seek to identify anomalies beyond standards compliance. The technique is validated on a sample of certificates from Certificate Transparency logs.

abstract anomaly anomaly detection arxiv beyond compliance cs.cr cs.lg detection identify logs sample seek standards testing transparency type