Location

https://www.kennesaw.edu/ccse/events/computing-showcase/fa25-cday-program.php

Document Type

Event

Start Date

24-11-2025 4:00 PM

Description

Cybersecurity is becoming an increasingly important part of digital life. Malware can silently intrude on a user’s system and perform malicious actions and generate unusual system behavior without the user ever being aware. This malware often presents with unusual system logs being generated. These logs, however, are difficult to consistently track and analyze, especially for casual users. To help bridge this gap between hard-to-read log data and the useful information it contains, we created LUAADS (short for Linux User Account Anomaly Detection System), designed for Ubuntu systems. LUAADS can automatically collect entries from common log files (such as syslog and auth.log), parse them into an easier-to-read format, and then analyze them for system patterns using machine learning. LUAADS can automatically alert the user when a log entry is anomalous and offers a feedback mechanism to improve on any false positives. LUAADS also offers a user-friendly GUI that allows non-tech-savvy users to be able to find and sort all their system logs in a single location. By bringing analysis of system logs to a wider audience, LUAADS helps improve Linux system security, even for non-tech-savvy users.

Share

COinS
 
Nov 24th, 4:00 PM

UC-1211 Machine Learning Linux Log Anomaly Detection

https://www.kennesaw.edu/ccse/events/computing-showcase/fa25-cday-program.php

Cybersecurity is becoming an increasingly important part of digital life. Malware can silently intrude on a user’s system and perform malicious actions and generate unusual system behavior without the user ever being aware. This malware often presents with unusual system logs being generated. These logs, however, are difficult to consistently track and analyze, especially for casual users. To help bridge this gap between hard-to-read log data and the useful information it contains, we created LUAADS (short for Linux User Account Anomaly Detection System), designed for Ubuntu systems. LUAADS can automatically collect entries from common log files (such as syslog and auth.log), parse them into an easier-to-read format, and then analyze them for system patterns using machine learning. LUAADS can automatically alert the user when a log entry is anomalous and offers a feedback mechanism to improve on any false positives. LUAADS also offers a user-friendly GUI that allows non-tech-savvy users to be able to find and sort all their system logs in a single location. By bringing analysis of system logs to a wider audience, LUAADS helps improve Linux system security, even for non-tech-savvy users.