Anomaly Detection in Certificate Transparency Logs

Richard Ostertág; Martin Stanek

Anomaly Detection in Certificate Transparency Logs

Cryptography and Security 2024-05-09 v1 Machine Learning

Authors: Richard Ostertág , Martin Stanek

Abstract

We propose an anomaly detection technique for X.509 certificates utilizing Isolation Forest. This method can be beneficial when compliance testing with X.509 linters proves unsatisfactory, and we seek to identify anomalies beyond standards compliance. The technique is validated on a sample of certificates from Certificate Transparency logs.

Cite

@article{arxiv.2405.05206,
  title  = {Anomaly Detection in Certificate Transparency Logs},
  author = {Richard Ostertág and Martin Stanek},
  journal= {arXiv preprint arXiv:2405.05206},
  year   = {2024}
}

Related papers

View all related →