Distributed pattern detection in cyber networks

Randy C. Paffenroth; Philip C. Du Toit; Louis L. Scharf; Anura P. Jayasumana; Vidarshana W. Banadara; Ryan Nong

doi:10.1117/12.919587

4 May 2012 Distributed pattern detection in cyber networks

Randy C. Paffenroth, Philip C. Du Toit, Louis L. Scharf, Anura P. Jayasumana, Vidarshana W. Banadara, Ryan Nong

Proceedings Volume 8408, Cyber Sensing 2012; 84080J (2012) https://doi.org/10.1117/12.919587
Event: SPIE Defense, Security, and Sensing, 2012, Baltimore, Maryland, United States

Abstract

In this paper we describe an approach for the detection and classication of weak, distributed patterns in sensor networks. Of course, before one can begin development of a pattern detection algorithm, one must rst dene the term "pattern", which by nature is a broad and inclusive term. One of the key aspects of our work is a denition of pattern that has already proven eective in detecting anomalies in real world data. While designing detection algorithms for all classes of patterns in all types of networks sounds appealing, this approach would almost certainly require heuristic methods and only cursory statements of performance. Rather, we have specically studied the problem of intrusion detection in computer networks in which a pattern is an abnormal or unexpected spatio-temporal dependence in the data collected across the nodes. We do not attempt to match an a priori template, but instead have developed algorithms that allow the pattern to reveal itself in the data by way of dependence or independence of observed time series. Although the problem is complex and challenging, recent advances in ℓ₁ techniques for robust matrix completion, compressed sensing, and correlation detection provide promising opportunities for progress. Our key contribution to this body of work is the development of methods that make an accounting of uncertainty in the measurements on which the inferences are based. The performance of our methods will be demonstrated on real world data, including measured data from the Abilene Internet2 network.

Citation Download Citation

Randy C. Paffenroth, Philip C. Du Toit, Louis L. Scharf, Anura P. Jayasumana, Vidarshana W. Banadara, and Ryan Nong "Distributed pattern detection in cyber networks", Proc. SPIE 8408, Cyber Sensing 2012, 84080J (4 May 2012); https://doi.org/10.1117/12.919587

ACCESS THE FULL ARTICLE

INSTITUTIONAL
Select your institution to access the SPIE Digital Library.

SELECT YOUR INSTITUTION

PERSONAL
Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.

PERSONAL SIGN IN

No SPIE Account? Create one

PURCHASE THIS CONTENT

SUBSCRIBE TO DIGITAL LIBRARY

50 downloads per 1-year subscription

Members: $195

Non-members: $335 ADD TO CART

25 downloads per 1 - year subscription

Members: $145

Non-members: $250 ADD TO CART

PURCHASE SINGLE ARTICLE

Includes PDF, HTML & Video, when available