Detecting security threats in storage systems using artificial intelligence techniques

A non-transitory processor-readable storage medium having stored therein program code of one or more software programs, wherein the program code when executed by at least one processing device causes the at least one processing device:

• to obtain historical performance data and historical capacity data pertaining to one or more storage objects within at least one storage system;
• to determine supervised datasets pertaining to security threat-related data and non-security threat-related data by processing at least a portion of the obtained historical performance data and historical capacity data using a first set of one or more artificial intelligence techniques, wherein the first set of one or more artificial intelligence techniques comprises at least one long short-term memory neural network comprising multiple hidden units, and wherein determining the supervised datasets comprises using the at least one long short-term memory neural network to determine multiple patterns, associated with multiple distinct intervals of time, in the at least a portion of the obtained historical performance data and historical capacity data;
• to configure a second set of one or more artificial intelligence techniques based at least in part on the determined supervised datasets;
• to detect one or more security threats in connection with at least one storage object within the at least one storage system by processing input data from the at least one storage object using the second set of one or more artificial intelligence techniques;
• and
• to perform at least one automated action based at least in part on the one or more detected security threats.

An apparatus comprising:

• at least one processing device comprising a processor coupled to a memory;
• the at least one processing device being configured:
• to obtain historical performance data and historical capacity data pertaining to one or more storage objects within at least one storage system;
• to determine supervised datasets pertaining to security threat-related data and non-security threat-related data by processing at least a portion of the obtained historical performance data and historical capacity data using a first set of one or more artificial intelligence techniques, wherein the first set of one or more artificial intelligence techniques comprises at least one long short-term memory neural network comprising multiple hidden units, and wherein determining the supervised datasets comprises using the at least one long short-term memory neural network to determine multiple patterns, associated with multiple distinct intervals of time, in the at least a portion of the obtained historical performance data and historical capacity data;
• to configure a second set of one or more artificial intelligence techniques based at least in part on the determined supervised datasets;
• to detect one or more security threats in connection with at least one storage object within the at least one storage system by processing input data from the at least one storage object using the second set of one or more artificial intelligence techniques;
• and
• to perform at least one automated action based at least in part on the one or more detected security threats.