Online detection of users' anomalous activities on confidential file sharing platform

标题文件是一个用于与**组织外部的授权方交换机密文档的平台。机密文件的外部共享增加了数据泄露到未经授权的**方的风险，无论是恶意的还是无意的，都是由于人为错误。为了降低这种风险，我们提出了以下**问题：“是否有可能根据用户的活动模式和描述交易的可用元数据，**实时检测到具有欺诈或意外行为症状的用户活动？”**该项目的目标是构建一个系统，用于在线检测TianFile用户的恶意、虚假或错误活动**。要检测的目标活动包括：数据窃取、数据外泄、外部**通信和文件共享。这些事件可能是用户错误或故意操作的结果。**该项目的结果将是一个分析模型，它将生成客户的典型配置文件，并**识别他们行为中的异常。示例活动包括：员工将公司数据发送给**未经授权的人，不小心与错误的人通信，以及将机密数据发送到**个人帐户。该系统将被设计为实时分析钛文件的日志流-对于每个**记录的事件，分类器将输出一个二进制决策以及置信度。该解决方案将**提供一个Python模块API，以便与现有的TianFile基础设施轻松集成。

TitanFile is a platform for exchanging confidential documents with authorized parties outside of the**organization. The external sharing of confidential documents raises the risk of data exfiltration to unauthorized**parties, whether maliciously or unintentionally due to human error. To mitigate this risk, we ask the following**question: "is it possible to detect user activities that have symptoms of fraudulent or unintended behavior in**real time based on the user's activity pattern and available metadata describing the transaction?"**The goal of the project is to construct a system for online detection of malicious, spurious or erroneous activity**of TitanFile's users. The targeted activities to be detected include: data theft, data exfiltration, external**correspondence and file sharing. Those events can occur as a result of user mistakes or intentional actions.**The result of the project will be an analytical model that will generate typical profiles across customers and**identify anomalies in their behaviour. Sample activities include: employees sending company data to**unauthorized persons, accidentally communicating with the wrong person and sending confidential data to**personal accounts. The system will be designed work in real time analyzing log streams of TitanFile - for each**logged event the classifier will output a binary decision along with a confidence level. The solution will be**provided with a Python module API for an easy integration with the existing TitanFile's infrastructure.