PREDICTIVE MACHINE LEARNING ARCHITECTURE FOR IDENTIFYING GAPS IN NETWORK ACTIVITY

Systems and methods for classifying gaps in network activity as normal or anomalous are disclosed. A computer system can identify time gaps between successive network events, which can comprise communications or interactions between entities or devices on a network. The computer system can identify network event data records corresponding to network events that occurred both before and after the identified time gaps. The computer system can use data contained in network event data records corresponding to these network events to derive data features that can be used to train a machine learning to classify time gaps based on those features. After training the machine learning model, the computer system can then extract data features corresponding to unlabeled time gaps, and input those data features into the trained machine learning model in order to classify those time gaps as normal or anomalous.