CSTS: Canonical Security Telemetry Substrate Standardizes Cross-Environment Telemetry for AI-Native Cyber Detection

arXiv·medium signal

Researchers propose CSTS, a Canonical Security Telemetry Substrate that replaces fragmented event-centric telemetry with a unified representation layer for AI-driven cybersecurity systems. The framework addresses the core failure mode where AI detection models trained in one environment fail under cross-environment deployment due to inconsistent telemetry schemas, enabling portable AI-native detection across diverse enterprise environments.