Project I+D+i: SIEM+AI

The developed system has the ability to detect and classify attacks in network traffic. Technically, neural networks have been implemented applied to various data sets, both public and synthetically generated, to identify anomalies in network traffic.

The relevant features of this binary classification are reported for validation by experts.

In addition, the detected attacks are grouped using unsupervised learning techniques and large-scale language models (LLMs) to determine the specific type of attack.