Hybrid Latent-Structural Fusion (HLSF) for Cyber Anomaly Detection

AI 中文解读

混合潜在结构融合（HLSF）让网络异常检测变得更准了！这项新方法将两种不同的AI技术巧妙结合，就像请来两位“安全侦探”：一位擅长寻找数据中的隐藏规律，另一位则擅长发现行为模式的异常，两人一合作，识别网络攻击的能力就大大超过单独使用其中任何一位。以前，这两种技术各自独立工作，效果有限；现在HLSF把它们加权融合，相当于给安全系统装上了“双视角”扫描仪，在大型企业网络的实际测试中，成功揪出了更多被黑客盗用的用户账号。对我们普通人来说，这意味着未来你用的银行、邮箱、社交媒体等在线服务，后台的安全系统能更快、更准地发现有人试图用你的密码登录异地设备，从而更及时地冻结异常操作，保护你的个人信息和虚拟财产。简单说，这项技术让网络世界的“门锁”更难被撬开，你的数字生活也就更安心了。

arXiv:2607.18479v1 Announce Type: new Abstract: Malicious anomalous activity detection is a fundamental challenge for cyber security systems. Both tensor decomposition under statistical framework with CANDECOMP-PARAFAC alternating Poisson regression (CP-APR) and normalizing flows have proven to be powerful unsupervised machine learning methods that model multi-dimensional data and capture complex and multi-faceted details of behavior profiles in cyber security applications. In this study, we propose Hybrid Latent-Structural Fusion (HLSF), a weighted anomaly fusion framework integrating CP-APR structural anomaly scores with latent-space density scores derived from normalizing flows. In our experiments, we show that the HLSF framework improves anomaly detection performance on a dataset of real-world compromised user credentials collected from the large enterprise network of Los Alamos National Laboratory (LANL) during a red-teaming exercise, compared with using CP-APR or normalizing flows alone.