Search results for "INTRUSION"

Dimensionality reduction framework for detecting anomalies from network logs

2012

Dynamic web services are vulnerable to multitude of intrusions that could be previously unknown. Server logs contain vast amounts of information about network traffic, and finding attacks from these logs improves the security of the services. In this research features are extracted from HTTP query parameters using 2-grams. We propose a framework that uses dimensionality reduction and clustering to identify anomalous behavior. The framework detects intrusions from log data gathered from a real network service. This approach is adaptive, works on the application layer and reduces the number of log lines that needs to be inspected. Furthermore, the traffic can be visualized. peerReviewed

Anomaly-based online intrusion detection system as a sensor for cyber security situational awareness system

2016

Almost all the organisations and even individuals rely on complex structures of data networks and networked computer systems. That complex data ensemble, the cyber domain, provides great opportunities, but at the same time it offers many possible attack vectors that can be abused for cyber vandalism, cyber crime, cyber espionage or cyber terrorism. Those threats produce requirements for cyber security situational awareness and intrusion detection capability. This dissertation concentrates on research and development of anomaly-based network intrusion detection system as a sensor for a situational awareness system. In this dissertation, several models of intrusion detection systems are devel…

Un programa de entrenamiento para familiares de pacientes con trastorno límite de la personalidad basado en la terapia dialéctica comportamental

2021

espanolLos familiares de pacientes con trastorno limite de la personalidad (TLP) experimentan ansiedad y depresion, y estan inmersos en un clima familiar disfuncional. Aunque existen tratamientos eficaces para el TLP, se ha prestado menos atencion a los familiares. El objetivo de este trabajo fue adaptar para familiares el entrenamiento grupal en habilidades de la terapia dialectica comportamental, en 14 sesiones. La muestra estuvo formada por 12 familiares: 50% madres, 41,7% padres y 8,3% parejas. Se evaluaron los niveles de depresion (BDI-II), ansiedad (OASIS) y emocion expresada (LEE-S) antes y despues de la intervencion. Los resultados indican que tras la intervencion se produce una mej…

Integrated geochemical and geophysical surveys for a study of sea-water intrusion

2009

Integrated geophysical survey for 3D modelling of a coastal aquifer polluted by seawater

2013

Geophysical surveys are carried out in the coastal area of Petrosino (south-western Sicily) to study the time evolution of seawater contamination of the coastal aquifer, probably increased due to human impact. The overexploitation of the aquifer, due to an intensive agricultural use has affected significantly the natural hydro-geochemical state of the basin. The study is based on a processing and integrated analysis of hydrogeological, geochemical and geophysical data. In particular in the last two years seasonal time-lapse electrical resistivity tomographies (ERT), new TDEM soundings and Multi-Analysis Surface Wave soundings (MASW) have been carried out. The interpretation of the total set…

Geophysical investigations in the Flumendosa River Delta, Sardinia (Italy) — Seismic reflection imaging

2006

A geophysical investigation that included seismic-reflection surveying and time-domain electromagnetics (EM) was carried out in the Flumendosa River Delta plain in southeastern Sardinia, Italy. The objective was to improve knowledge of geologic and hydrogeologic controls on a highly productive aquifer hosted in thick Quaternary deposits and known to be affected by an extensive saltwater intrusion. The seismic reflection survey, whose results are reported here, aimed to image the Paleozoic bedrock topography and to obtain detailed structural and stratigraphic information on the sequence of largely fluvial sediments extending from the surface down to bedrock. The survey consisted of two inli…

Comparative tests on different multi-electrode arrays using models in near-surface geophysics

2008

In this paper, the response of different synthetic models to geoelectrical multi-electrode surveys is studied. The models considered are related to two main problems, which are very common in geophysical research regarding hydrogeology and engineering. The first class of models represents buried walls, similar archaeological remains or remains of buried foundations; the other class corresponds to a sea-water intrusion of a fresh water aquifer, which is generally studied in hydrogeophysics. A set of 2D simulations, starting from the synthetic models, was carried out to compare the behaviour of the different arrays when acquiring measurements of electrical resistivity tomography. For each mod…

Integrated hydrogeochemical and geophysical surveys for a study of sea-water intrusion

2010

The CFTA Department of the University of Palermo in collaboration with ARPA SICILIA has carried out a study of the sea intrusion phenomenon in the aquifer between the cities of Marsala and Mazara del Vallo (south-western Sicily) using geophysical techniques (TDEM, ERT and MASW) and geochemical analysis of well water. The aim of the research was to optimize the acquisition techniques, data processing and data interpretation for the geometry reconstruction of aquifers, their characterization, and the determination of concentration of pollutants. The analysis of the geophysical results reveals the existence of very low resistivity values in correspondence of the area from the coastline to a ki…

Large-scale nonlinear dimensionality reduction for network intrusion detection

2017

International audience; Network intrusion detection (NID) is a complex classification problem. In this paper, we combine classification with recent and scalable nonlinear dimensionality reduction (NLDR) methods. Classification and DR are not necessarily adversarial, provided adequate cluster magnification occurring in NLDR methods like $t$-SNE: DR mitigates the curse of dimensionality, while cluster magnification can maintain class separability. We demonstrate experimentally the effectiveness of the approach by analyzing and comparing results on the big KDD99 dataset, using both NLDR quality assessment and classification rate for SVMs and random forests. Since data involves features of mixe…

On Application-Layer DDoS Attack Detection in High-Speed Encrypted Networks

2016

Application-layer denial-of-service attacks have become a serious threat to modern high-speed computer networks and systems. Unlike network-layer attacks, application-layer attacks can be performed by using legitimate requests from legitimately connected network machines which makes these attacks undetectable for signature-based intrusion detection systems. Moreover, the attacks may utilize protocols that encrypt the data of network connections in the application layer making it even harder to detect attacker’s activity without decrypting users network traffic and violating their privacy. In this paper, we present a method which allows us to timely detect various applicationlayer attacks ag…