Security Operations Centres (SOC) are overwhelmed by false positives due to the rapid growth in data volumes and the inability of current analytics models to adapt to evolutionary changes in logs, i.e., unstable log data, creating a need for more efficient solutions. Thus, we introduce VoBERT, an innovative sequence anomaly detection method. An improvement on BERTs (Bidirectional Encoder Representations from Transformers), VoBERT adds resilience by accurately classifying unstable logs that traditional BERTlike models would deem outofvocabulary...

By: Eduardo Barbaro , Daan Hofman , Anna Lukina , Yury Zhauniarovich

Full Abstract and Presentation Materials:
https://www.blackhat.com/eu23/briefi...