Machine learning security threat detection using a meta-learning model

A system comprising:

• a memory comprising computer readable instructions;
• and
• a processing device for executing the computer readable instructions for performing a method comprising:
• receiving monitoring data in real-time from online activity in a network at a threat detection system, the threat detection system including a machine learning model;
• analyzing the monitoring data via the machine learning model to identify one or more anomalies in the monitoring data associated with a security threat to the network, the machine learning model trained according to one or more learning parameters;
• receiving a subset of the monitoring data at a meta-learning module, and storing the subset as time-based historical data;
• inputting the historical data at a meta-learning model, and calculating an update policy prescribing a change to the one or more learning parameters based on the historical data;
• and
• applying the update policy to the machine learning model.

A computer program product comprising:

• a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a processing device to cause the processing device to perform a method comprising:
• receiving monitoring data in real-time from online activity in a network at a threat detection system, the threat detection system including a machine learning model;
• analyzing the monitoring data via the machine learning model to identify one or more anomalies in the monitoring data associated with a security threat to the network, the machine learning model trained according to one or more learning parameters;
• receiving a subset of the monitoring data at a meta-learning module, and storing the subset as time-based historical data;
• inputting the historical data at a meta-learning model, and calculating an update policy prescribing a change to the one or more learning parameters based on the historical data;
• and
• applying the update policy to the machine learning model.