Title
Inference of Security Hazards from Event Composition Based on Incomplete or Uncertain Information
Abstract
In many security-related contexts, a quick recognition of security hazards is required. Such recognition is challenging, since available information sources are often insufficient to infer the occurrence of hazards with certainty. This requires that the recognition of security hazard is carried out using inference based on patterns of occurrences distributed over space and time. The two main existing approaches to the inference of security hazards are a) custom-coded solutions, which are tailored to specific patterns, and cannot respond quickly to changes in the patterns of occurrences used for inference, and b) approaches based on direct statistical inferencing techniques, such as regression, which do not enable combining various kinds of evidence regarding the same hazard. In this work, we introduce a more generic formal framework which overcomes the aforementioned deficiencies, together with a case study illustrating the detection of DoS attacks.
Year
DOI
Venue
2008
10.1109/TKDE.2008.74
Knowledge and Data Engineering, IEEE Transactions
Keywords
Field
DocType
inference mechanisms,security of data,statistical analysis,uncertainty handling,direct statistical inferencing technique,event composition,formal framework,incomplete information,security hazard,uncertain information,uncertainty handling,Decision support,Fuzzy and probabilistic reasoning,Network-level security and protection,Uncertainty
Data mining,Denial-of-service attack,Computer science,Inference,Decision support system,Information security,Artificial intelligence,Face detection,Perfect information,Reactive system,Complete information,Machine learning
Journal
Volume
Issue
ISSN
20
8
1041-4347
Citations 
PageRank 
References 
10
0.99
6
Authors
3
Name
Order
Citations
PageRank
Segev Wasserkrug114012.25
Avigdor Gal21128116.45
Opher Etzion3798148.62