Machine learning assisted identification of security patterns

A system, comprising:

• a computing device comprising a processor and a memory;
• and
• machine-readable instructions stored in the memory that, when executed by the processor, cause the computing device to at least:
• identify a plurality of features associates with an application;
• submit the plurality of features to a random forest machine learning model;
• receive a set of security patterns from the random forest machine learning model;
• submit the plurality of features and the set of security patterns to a k-nearest neighbor (KNN) machine learning model;
• receive a subset of the set of security patterns that are nearest neighbors of at least one feature of the plurality of features;
• and
• return the subset of the set of security patterns as the collection of security patterns to apply to the application.

A method, comprising:

• identifying a plurality of features associated with an application;
• submitting the plurality of features to a random forest machine learning model;
• receiving a set of security patterns from the random forest machine learning model;
• submitting the plurality of features and the set of security patterns to a k-nearest neighbor (KNN) machine learning model;
• receiving a subset of the set of security patterns that are nearest neighbors of at least one feature of the plurality of features;
• and
• returning the subset of the set of security patterns as the collection of security patterns to apply to the application.