TY - GEN
T1 - AI-Powered Intelligent Log Analysis and Zero Trust Frameworks
T2 - 5th International Conference on Computing and Communication Networks, ICCCN 2025
AU - Nkrumah, Ivy Payne
AU - Sarpong, Kofi Manu
AU - Sowah, Robert A.
N1 - Publisher Copyright:
© The Author(s), under exclusive license to Springer Nature Switzerland AG 2026.
PY - 2026
Y1 - 2026
N2 - The proliferation of cloud computing has introduced significant cybersecurity challenges, emphasizing the need for advanced anomaly detection systems to safeguard critical data and infrastructure. This research presents a novel approach that integrates motif discovery with machine learning techniques to enhance the detection of anomalies in cloud security logs. Motifs, extracted as domain-specific features, were introduced to capture contextual patterns in the data, improving model interpretability and performance. Despite achieving exceptional accuracy (99.93%) and strong precision and recall for majority classes, initial experiments revealed a critical limitation in handling rare, minority-class anomalies, often indicative of high-impact security threats. To address this imbalance, the Synthetic Minority Oversampling Technique (SMOTE) was applied, effectively augmenting minority class representation and enabling the model to achieve uniform precision, recall, and F1-scores across all classes. This integration demonstrated the model's capability to process bulk cloud logs accurately, classify known threats reliably, and detect rare anomalies critical for Zero Trust architectures. The findings underline the importance of robust preprocessing methodologies, such as motif discovery, and advanced oversampling techniques to mitigate class imbalance in cybersecurity datasets. The research further recommends iterative motif refinement, hybrid oversampling approaches, and adaptive real-time deployment to ensure resilience against evolving threat landscapes. This work establishes a foundational framework for scalable and adaptive anomaly detection in cloud computing environments, addressing both operational efficiency and critical security needs.
AB - The proliferation of cloud computing has introduced significant cybersecurity challenges, emphasizing the need for advanced anomaly detection systems to safeguard critical data and infrastructure. This research presents a novel approach that integrates motif discovery with machine learning techniques to enhance the detection of anomalies in cloud security logs. Motifs, extracted as domain-specific features, were introduced to capture contextual patterns in the data, improving model interpretability and performance. Despite achieving exceptional accuracy (99.93%) and strong precision and recall for majority classes, initial experiments revealed a critical limitation in handling rare, minority-class anomalies, often indicative of high-impact security threats. To address this imbalance, the Synthetic Minority Oversampling Technique (SMOTE) was applied, effectively augmenting minority class representation and enabling the model to achieve uniform precision, recall, and F1-scores across all classes. This integration demonstrated the model's capability to process bulk cloud logs accurately, classify known threats reliably, and detect rare anomalies critical for Zero Trust architectures. The findings underline the importance of robust preprocessing methodologies, such as motif discovery, and advanced oversampling techniques to mitigate class imbalance in cybersecurity datasets. The research further recommends iterative motif refinement, hybrid oversampling approaches, and adaptive real-time deployment to ensure resilience against evolving threat landscapes. This work establishes a foundational framework for scalable and adaptive anomaly detection in cloud computing environments, addressing both operational efficiency and critical security needs.
KW - SMOTE
KW - artificial intelligence
KW - machine learning
KW - motifs discovery
KW - zero trust security
UR - https://www.scopus.com/pages/publications/105037745079
U2 - 10.1007/978-3-032-18211-1_3
DO - 10.1007/978-3-032-18211-1_3
M3 - Conference contribution
AN - SCOPUS:105037745079
SN - 9783032182104
T3 - Lecture Notes in Networks and Systems
SP - 33
EP - 46
BT - Proceedings of 5th International Conference on Computing and Communication Networks - ICCCN 2025
A2 - Nguyen, Gia-Nhu
A2 - Swaroop, Abhishek
A2 - Shukla, Pancham
PB - Springer Science and Business Media Deutschland GmbH
Y2 - 1 August 2025 through 3 August 2025
ER -