Abstract
A system and method detect infrastructure role mutation by learning a semantic operational identity for each monitored infrastructure entity from multi-layer runtime telemetry. The system maintains an adaptive temporal trajectory of each entity's role and detects when that role diverges from its established purpose using semantic distance metrics, without requiring predefined rules, static baselines, or known threat signatures. By incorporating cross-entity graph context, the system distinguishes legitimate orchestrated changes from unauthorized infrastructure repurposing, enabling early detection of role mutation that is invisible to conventional monitoring and security tools.
Creative Commons License

This work is licensed under a Creative Commons Attribution 4.0 License.
Recommended Citation
Verma, Dinesh, "GENAI-DRIVEN DETECTION OF INFRASTRUCTURE ROLE MUTATION USING BEHAVIORAL EMBEDDINGS", Technical Disclosure Commons, ()
https://www.tdcommons.org/dpubs_series/11264