FIELD: computing technology.
SUBSTANCE: server-implemented method for adjusting the parameters of a machine learning model in order to identify false triggering and information security incidents (hereinafter incidents), wherein verdicts are changed for a certain part of information security events (hereinafter the first set of events) with a "false triggering" verdict to "incident" verdicts, wherein verdicts for events are determined using a machine learning model for determining false triggering and/or incidents, wherein the first set of events is selected, in particular, randomly among events with a "false triggering" verdict, wherein such an amount of events of the first set is selected that does not exceed the second threshold, which is a parameter of the machine learning model; at least part of the events of the first set of events are sent for analysis to the analytical center; using the analysis results containing the verdicts issued to the events sent for analysis, the parameters of the machine learning model are adjusted to determine false triggering and/or incidents.
EFFECT: reduction in the amount of false triggering.
19 cl, 7 dwg
Title | Year | Author | Number |
---|---|---|---|
METHOD FOR PROCESSING INFORMATION SECURITY EVENTS PRIOR TO TRANSMISSION FOR ANALYSIS | 2020 |
|
RU2762528C1 |
SYSTEM AND METHOD OF DETECTING THE SIGNS OF COMPUTER ATTACKS | 2017 |
|
RU2661533C1 |
SYSTEM AND METHOD OF CORRELATING EVENTS FOR DETECTING INFORMATION SECURITY INCIDENT | 2019 |
|
RU2739864C1 |
METHOD FOR FILTERING EVENTS FOR TRANSMISSION TO REMOTE DEVICE | 2022 |
|
RU2813239C1 |
SYSTEM AND METHOD OF CREATING ANTIVIRUS RECORD | 2018 |
|
RU2697954C2 |
SYSTEM AND METHOD FOR IDENTIFYING MALICIOUS FILES | 2017 |
|
RU2673407C1 |
METHOD FOR IDENTIFYING INFORMATION SECURITY THREATS (OPTIONS) | 2023 |
|
RU2802539C1 |
SYSTEM AND METHOD FOR DETERMINING THE LEVEL OF DANGER OF INFORMATION SECURITY EVENTS | 2022 |
|
RU2800739C1 |
SYSTEM AND METHOD FOR DETERMINING PROCESS ASSOCIATED WITH MALWARE ENCRYPTING COMPUTER SYSTEM FILES | 2020 |
|
RU2770570C2 |
SYSTEM AND METHOD OF DETECTING DIRECTED ATTACK ON CORPORATE INFRASTRUCTURE | 2013 |
|
RU2587426C2 |
Authors
Dates
2021-12-27—Published
2020-06-19—Filed