BUILDING SECURITY ANALYSIS SYSTEM WITH SITE-INDEPENDENT SIGNATURE GENERATION FOR PREDICTIVE SECURITY ANALYSIS

摘要

The present disclosure relates to a network-based centralized security monitoring (CSM) system. An example CSM includes one or more memory devices configured to store instructions thereon that, when executed by one or more processors, cause the one or more processors to receive a plurality of parameter data elements comprising one or more characters for a plurality of parameter types from a monitored site, determine for each of the plurality of parameter types a number of occurrences of a plurality of different character groups in the plurality of parameter data elements, generate a count structure indicating the number of occurrences of the plurality of different character groups in the plurality of parameter data elements for each of the plurality of parameter types, and generate a security signature for the monitored site, the security signature comprising the count structure for each of the plurality of parameter types.