Online detection of users' anomalous activities on confidential file sharing platform

TitanFile是一个与 ** 组织外的授权方交换机密文件的平台。机密文档的外部共享增加了数据泄露给未经授权的 ** 方的风险，无论是恶意的还是由于人为错误而无意的。为了降低这种风险，我们提出了以下 ** 问题：“是否有可能根据用户的活动模式和描述交易的可用元数据，** 真实的实时检测出具有欺诈或非预期行为症状的用户活动？该项目的目标是构建一个系统，用于在线检测TitanFile用户的恶意，虚假或错误活动。要检测的目标活动包括：数据窃取、数据泄露、外部 ** 通信和文件共享。这些事件可能是由于用户错误或故意操作而发生的。**该项目的结果将是一个分析模型，将生成客户的典型概况，并 ** 确定其行为中的异常情况。示例活动包括：员工将公司数据发送给 ** 未经授权的人员，意外地与错误的人通信，并将机密数据发送到 ** 个人帐户。该系统将被设计为在真实的时间分析TitanFile的日志流-对于每个 ** 记录的事件，分类器将输出一个二进制决策沿着置信水平。该解决方案将 ** 提供Python模块API，以便与现有TitanFile的基础设施轻松集成。

TitanFile is a platform for exchanging confidential documents with authorized parties outside of the**organization. The external sharing of confidential documents raises the risk of data exfiltration to unauthorized**parties, whether maliciously or unintentionally due to human error. To mitigate this risk, we ask the following**question: "is it possible to detect user activities that have symptoms of fraudulent or unintended behavior in**real time based on the user's activity pattern and available metadata describing the transaction?"**The goal of the project is to construct a system for online detection of malicious, spurious or erroneous activity**of TitanFile's users. The targeted activities to be detected include: data theft, data exfiltration, external**correspondence and file sharing. Those events can occur as a result of user mistakes or intentional actions.**The result of the project will be an analytical model that will generate typical profiles across customers and**identify anomalies in their behaviour. Sample activities include: employees sending company data to**unauthorized persons, accidentally communicating with the wrong person and sending confidential data to**personal accounts. The system will be designed work in real time analyzing log streams of TitanFile - for each**logged event the classifier will output a binary decision along with a confidence level. The solution will be**provided with a Python module API for an easy integration with the existing TitanFile's infrastructure.