A New Approach to Fuzzy Regular Expression Parsers for Cybersecurity Logs

Trevor Martin, Alex Healing, Ben Azvine

Abstract: As we move towards a zero-trust environment, collaborative intelligent systems are a vital tool in the cybersecurity workflow. These intelligent systems need to receive accurate and complete information from the multiplicity of low-level network monitoring systems. Typically, these low-level systems use regular expressions which are fast but not robust against minor changes - thus, information is often discarded. This paper outlines a new approach to low-level parsers, able to suggest new regular expression sequences and deal with approximate matching in an efficient way.