Abstract: A serverless data processing architecture may be a high-velocity, cost-efficient and massively scalable log ingest application and event parser that may act as the intermediary between data collection and data analysis and may handle the receipt and parsing of incoming event data generated by collector and sensor applications. The log analytics data science portion of an ingest process may determine if arbitrarily structured log data is anomalous and/or security relevant via single event or multievent algorithms. There are numerous applications for both the single and multi-event log analytics platforms. Any application involving reliably finding anomalous pieces of semi-structured or unstructured text data may provide potential use cases. These processes may be particularly widely applicable because these processes are agnostic to and require no prior knowledge of the structure of the data.

Abstract: A serverless data processing architecture may be a high-velocity, cost-efficient and massively scalable log ingest application and event parser that may act as the intermediary between data collection and data analysis and may handle the receipt and parsing of incoming event data generated by collector and sensor applications. The log analytics data science portion of an ingest process may determine if arbitrarily structured log data is anomalous and/or security relevant via single event or multievent algorithms. There are numerous applications for both the single and multi-event log analytics platforms. Any application involving reliably finding anomalous pieces of semi-structured or unstructured text data may provide potential use cases. These processes may be particularly widely applicable because these processes are agnostic to and require no prior knowledge of the structure of the data.

Abstract: A serverless data processing architecture may be a high-velocity, cost-efficient and massively scalable log ingest application and event parser that may act as the intermediary between data collection and data analysis and may handle the receipt and parsing of incoming event data generated by collector and sensor applications. The log analytics data science portion of an ingest process may determine if arbitrarily structured log data is anomalous and/or security relevant via single event or multievent algorithms. There are numerous applications for both the single and multi-event log analytics platforms. Any application involving reliably finding anomalous pieces of semi-structured or unstructured text data may provide potential use cases. These processes may be particularly widely applicable because these processes are agnostic to and require no prior knowledge of the structure of the data.

Abstract: A serverless data processing architecture may be a high-velocity, cost-efficient and massively scalable log ingest application and event parser that may act as the intermediary between data collection and data analysis and may handle the receipt and parsing of incoming event data generated by collector and sensor applications. The log analytics data science portion of an ingest process may determine if arbitrarily structured log data is anomalous and/or security relevant via single event or multievent algorithms. There are numerous applications for both the single and multi-event log analytics platforms. Any application involving reliably finding anomalous pieces of semi-structured or unstructured text data may provide potential use cases. These processes may be particularly widely applicable because these processes are agnostic to and require no prior knowledge of the structure of the data.

Abstract: In certain embodiments, three or more sensors may be installed on a core banking system to detect anomalous behavior. Each of the sensors may be configured to detect removal or corruption of any of the other sensors at a periodic interval and to repair or reinstall any of the other sensors that has been corrupted or removed so that the combination of the sensors makes the group of sensors unremovable. A sensor may be configured to detect anomalous behavior by applying an anomaly detection model developed using live data collected by the sensor. In certain embodiments, a new anomaly detection model may be developed and trained to recognize potentially anomalous events; tested; and used to generate a live score to indicate the likelihood that a detected event is an anomaly. A model may be used for scoring in as little as 6 hours after initial receipt of live data.