Method, apparatus, and computer-readable recording medium for performing machine learning-based observation level measurement using server system log and performing risk calculation using the same

Abstract

The present disclosure relates to a method of performing machine learning-based observation level measurement including: a log preprocessing step; a log file linkage step of processing a log file to store the log file in a HDFS, and linking the processed log file to a big data storage; a feature value extraction step of requesting an inquiry of a raw log, and extracting a feature value for a normal behavior from the inquired raw log; a model training step of normalizing the extracted feature value to level a baseline value for the normal behavior, and training a machine learning model based on the leveled baseline value; and a risk calculation step of determining, when a log that violates the leveled baseline value is detected, that an abnormal behavior is detected so as to calculate a risk for the detected abnormal behavior.