Ask a Question

Prefer a chat interface with context about you and your work?

General-purpose Unsupervised Cyber Anomaly Detection via Non-negative Tensor Factorization

General-purpose Unsupervised Cyber Anomaly Detection via Non-negative Tensor Factorization

Distinguishing malicious anomalous activities from unusual but benign activities is a fundamental challenge for cyber defenders. Prior studies have shown that statistical user behavior analysis yields accurate detections by learning behavior profiles from observed user activity. These unsupervised models are able to generalize to unseen types of attacks by detecting …