Cloud Security by Detecting Event Log Anomalies Using Machine Learning

Our Solution

We set up a continuous feed of raw data logs, using AWS Kinesis from AWS CloudTrail. Data were then grouped by Time, Usertype, and Logtype into multiple batches. From these batches, variables were generated to be fed into a Machine Learning model that predicted if the data entry was an anomaly, using logistic regression.