Oracle International Corporation

Hossein Hajimirsadeghi

Andrew Brownsword

Guang-Tong Zhou

Felix Schmidt

Craig Schelp

Nipun Agarwal

Stuart Wray

Onur Kocberber

Karoon Rashedi Nia

Manel Fernandez Gomez

Rod Reddekopp

Juan Fernandez Peinador

Pavan Chandrashekar

Techniques are provided herein for contextual embedding of features of operational logs or network traffic for anomaly detection based on sequence prediction. In an embodiment, a computer has a predictive recurrent neural network (RNN) that detects an anomalous network flow. In an embodiment, an RNN contextually transcodes sparse feature vectors that represent log messages into dense feature vectors that may be predictive or used to generate predictive vectors. In an embodiment, graph embedding improves feature embedding of log traces. In an embodiment, a computer detects and feature-encodes independent traces from related log messages. These techniques may detect malicious activity by anomaly analysis of context-aware feature embeddings of network packet flows, log messages, and/or log traces.

Malicious activity detection by cross-trace analysis and deep learning

Context-aware feature embedding and anomaly detection of sequential log data using deep recurrent neural networks

Growing community of inventors

Vancouver, Canada

Hossein Hajimirsadeghi