Intrusion Detection at Scale with the Assistance of a Command-line Language Model

arXiv:2404.13402v1 Announce Type: cross
Abstract: Intrusion detection is a long standing and crucial problem in security. A system capable of detecting intrusions automatically is on great demand in enterprise security solutions. Existing solutions rely heavily on hand-crafted rules designed by security operators, which suffer from high false negative rates and poor generalization ability to new, zero-day attacks at scale. AI and machine learning offer promising solutions to address the issues, by inspecting abnormal user behaviors intelligently and automatically from data. …

abstract arxiv command cs.ai cs.cl cs.cr demand detection enterprise enterprise security false language language model line negative operators rules scale security solutions type