Posted On: Mar 24, 2021

Today, we are announcing the general availability of ML Detect, a new feature of AWS IoT Device Defender that automatically detects device-level operational and security anomalies across your IoT fleet by learning from your past data. Now, in addition to being able to manually set static alarms with AWS IoT Device Defender Rules Detect, you can use machine learning to automatically learn your fleet's expected behaviors so that you don’t need an in-depth understanding of how your devices act across a range of metrics to get started.  

With ML Detect, you can monitor device behaviors based on 13 cloud-side and device-side metrics such as authorization failures, messages sent, and listening TCP port counts. Additionally, ML Detect automatically updates the expected behaviors based on new data trends of your fleet caused by seasonality or other changing factors. When an anomaly is detected, you can respond by choosing a built-in mitigation action such as quarantining a device.

ML Detect is available in all AWS Regions where AWS IoT Device Defender is available except AWS GovCloud (US) Regions. To learn more about the feature, please see the launch blog post and AWS IoT Device Defender developer guide.