Paper evaluates word embedding techniques on Russian digital humanities datasets.
problem Evaluating word embedding techniques on Russian language datasets.
method Created and evaluated word intrusion and word analogy tasks on manually curated datasets.
result Baseline evaluations with word embedding models show differences in performance for Russian and English datasets.
Geometric Graph Alignment enhances IoT intrusion detection using NID data.
problem Data scarcity hinders IoT intrusion detection accuracy.
method Geometric Graph Alignment (GGA) approach to transfer knowledge between network intrusion detection and IoT intrusion detection domains.
result GGA approach boosts IoT intrusion detection performance on multiple datasets.
The counting grid is a grid of microtopics, sparse word/feature distributions. The generative model associated with the grid does not use these microtopics individually. Rather, it groups them in overlapping rectangular windows and uses these grouped microtopics as either mixture or admixture components. This paper bui…
Paper proposes mimic learning to share intrusion detection models without private data.
problem Difficulty in obtaining labelled training data for intrusion detection models due to privacy concerns.
method Use of mimic learning to transfer knowledge from a teacher model trained on private data to a student model.
result Student model mimics teacher model without access to private data.
Proposes ML-RBM for non-intrusive load monitoring without appliance-level data.
problem Non-intrusive load monitoring without appliance-level data.
method Multi-label Restricted Boltzmann Machine (ML-RBM)
result Experimental evaluation of proposed and state-of-the-art techniques.
This paper explores deep learning for improved intrusion detection.
problem Improving intrusion detection systems using deep learning.
method Discusses deep learning models and neural networks for intrusion detection.
result Promises enhanced performance in intrusion detection.
This paper shows diffusion models improve intrusion detection by purifying adversarial examples.
problem Adversarial examples mislead ML intrusion detection systems, leading to false alerts or evasion.
method Used diffusion models to purify adversarial examples in intrusion detection.
result Diffusion models enhance adversarial robustness in intrusion detection without significantly impacting normal performance.
Enhances network intrusion detection in noisy data.
problem Robustness against contaminated and noisy data inputs in network intrusion detection.
method Probabilistic Temporal Graph Network Support Vector Data Description (TGN-SVDD) model.
result Significant improvements in detection performance with synthetic noise.
Improved non-intrusive load monitoring with a novel neural network.
problem Accurately disaggregating household electricity consumption without dedicated meters.
method Developed a scale- and context-aware network with multi-scale features and contextual information.
result Significantly improved accuracy compared to state-of-the-art methods.
Proposes SOMDAGMM for more accurate network intrusion detection.
problem Inaccurate network intrusion detection in secure network environments.
method Integrates self-organizing map with deep autoencoding Gaussian mixture model.
result SOMDAGMM outperforms state-of-the-art DAGMM with up to 15.58% improvement in F1 score.
Non-intrusive algorithm corrects corrupted data in classification models.
problem Classification problems with corrupted training data.
method Post-processes a trained classification model with a correction procedure.
result Corrected models deliver correct classification results even with corrupted data.
Project compares KDDCup99 and NSL-KDD datasets using ML classifiers.
problem Quality and bias in IoT network intrusion detection datasets.
method Evaluation of various ML classifiers on both datasets.
result NSL-KDD dataset is of higher quality with lower bias.
A tree-based IDS detects cyber-attacks in AV networks.
problem Cyber-attacks in AV and IoV networks.
method Tree-structure machine learning models, ensemble learning, feature selection.
result High detection rate and low computational cost achieved.
Study on deep learning IDS resistance against adversarial attacks.
problem Vulnerabilities in deep learning-based IDS against adversarial attacks.
method Apply min-max optimization to train IDS against adversarial samples.
result Adversarial attack methods can be used in continuous domains and boost IDS robustness.
User authentication and intrusion detection differ from standard classification problems in that while we have data generated from legitimate users, impostor or intrusion data is scarce or non-existent. We review existing techniques for dealing with this problem and propose a novel alternative based on a principled sta…
AutoIDS uses auto-encoders to detect network intrusions efficiently.
problem Detecting network intrusions with high accuracy and efficiency.
method Semi-supervised machine learning with cascading encoder-decoder neural networks.
result AutoIDS achieves 90.17% accuracy on NSL-KDD dataset, superior to other methods.
Deep learning detects cyber-attacks in smart grid systems.
problem Cyber-attacks on smart grid systems.
method Deep learning-based intrusion detection system trained on industrial dataset.
result Proposed system outperforms Naive Bayes, SVM, and Random Forest.
EagerNet detects network attacks quickly with less resources.
problem Efficiently detecting network attacks with minimal resources.
method Proposes a new architecture that trades prediction speed for accuracy, evaluating only a subset of layers.
result Comparable accuracies to simple FCNNs achieved with early predictions, saving energy and computational efforts.
New method learns low-dimensional models for systems with non-polynomial terms.
problem Modeling systems with non-polynomial nonlinear terms that are spatially local and given in analytic form.
method Non-intrusive model reduction method that learns operators for linear and polynomially nonlinear dynamics via a least-squares problem incorporating given non-polynomial terms.
result Comparable accuracy to intrusive methods that require full knowledge of governing equations.
A novel algorithm uses Gaussian process regression to interpret non-intrusive ROMs.
problem Lack of interpretability in non-intrusive ROMs.
method Latent-space interpolation using Gaussian process regression.
result Interpretability of ROMs improved with continuous time evolution.
Bayesian coresets help reduce network intrusion detection data size.
problem Large network intrusion detection data sets hinder Bayesian learning.
method Use Bayesian coresets to reduce data size while maintaining accuracy.
result Bayesian coresets improve learning accuracy and reduce storage needs.
Adversarial attacks hide cyber-physical attacks in ICS.
problem Hiding cyber-physical attacks in industrial control systems.
method Modeling an attacker compromising sensors, manipulating data, and evaluating attacks on both continuous and mixed data.
result Successfully hides cyber-physical attacks with 2.87 out of 12 sensors compromised on average.
Improves NILM with multi-label SRC, outperforming state-of-the-art.
problem Non-intrusive load monitoring (NILM) for energy disaggregation.
method Modified multi-label sparse representation based classification (SRC).
result Significant improvement over state-of-the-art techniques with minimal training data.
Improved IDS using LSTM and embedding for network traffic data.
problem Network security threats and need for IDS to detect attacks.
method Proposes IDS models using LSTM for time-series and embedding for categorical network traffic data.
result Improves binary classification accuracy to 99.72%.
New NIDS uses hypergraphs for real-time detection of evolving port scans.
problem Challenges in offline NIDS for auto-generated port scans.
method Hypergraph-based metrics for real-time ML ensemble NIDS.
result High accuracy, precision, and recall in detecting port scans and attacks.
Historically, machine learning in computer security has prioritized defense: think intrusion detection systems, malware classification, and botnet traffic identification. Offense can benefit from data just as well. Social networks, with their access to extensive personal data, bot-friendly APIs, colloquial syntax, and …
Many current approaches to the design of intrusion detection systems apply feature selection in a static, non-adaptive fashion. These methods often neglect the dynamic nature of network data which requires to use adaptive feature selection techniques. In this paper, we present a simple technique based on incremental le…
A convolutional sequence to sequence non-intrusive load monitoring model is proposed in this paper. Gated linear unit convolutional layers are used to extract information from the sequences of aggregate electricity consumption. Residual blocks are also introduced to refine the output of the neural network. The partiall…
This paper presents a method called One-class Classification using Length statistics of Emerging Patterns Plus (OCLEP+).
Active learning improves network intrusion detection with minimal labeled data.
problem Finding new attack vectors in low-volume traffic.
method Proposes an active learning framework to minimize labeled data while improving detection quality.
result Active learning with minimal labeled data significantly improves anomaly detection in network traffic.
New online learning algorithms improve cyberattack detection in industrial control systems.
problem Detecting cyberattacks in industrial control systems with limited resources.
method Online learning algorithms to process continuous data streams and address class imbalance.
result Improved detection rate of cyberattacks in industrial control systems.
Paper proposes an efficient GAN model for discrete cyber-intrusion detection.
problem Cyber-intrusion detection in systems with rare abnormal data.
method Generative adversarial network (GAN) with a specifically-designed loss function for discrete data.
result The proposed model outperforms state-of-the-art models on discrete datasets.
Paper proposes a neural network for disaggregating appliance-level energy consumption.
problem Estimating appliance-level electricity consumption from a single meter.
method Adapts a neural network to classify operational state changes of appliances.
result Competitive performance compared to existing methods in simulated experiments.
Non-intrusive load monitoring or energy disaggregation involves estimating the power consumption of individual appliances from measurements of the total power consumption of a home. Deep neural networks have been shown to be effective for energy disaggregation. In this work, we present a deep neural network architectur…
The paper introduces metrics to evaluate NILM algorithms' performance on unseen buildings.
problem Assessing NILM algorithms' performance on new, unseen buildings.
method Developed several metrics to evaluate NILM algorithms' generalization ability.
result Demonstrated the utility of the proposed metrics through two case studies.
A new IDS method uses GANs to detect anomalies in network traffic.
problem Detecting network anomalies with limited labeled data.
method End-to-end adversarial learning using GANs for semi-supervised learning.
result The method outperforms state-of-the-art IDS approaches.
Random Forest outperforms other IDS algorithms in smart grids.
problem Security vulnerabilities in smart grids.
method Comparison of four data mining algorithms (Random Forest, SVM, Neural Network, and KNN) in detecting attacks.
result Random Forest outperforms other algorithms in terms of detection accuracy and efficiency.
This paper studies adversarial examples in NIDS, revealing their vulnerability.
problem Vulnerability of machine learning-based NIDS to adversarial examples.
method Used evolutionary computation and deep learning to generate adversarial examples.
result Adversarial examples cause high misclassification rates in various machine learning models.
In the world today computer networks have a very important position and most of the urban and national infrastructure as well as organizations are managed by computer networks, therefore, the security of these systems against the planned attacks is of great importance. Therefore, researchers have been trying to find th…
Paper proposes a novel optimization method for disaggregating smart meter data.
problem Energy disaggregation, inferring appliance-specific energy consumption from aggregate meter data.
method Two-stage optimization approach: first phase uses mixed integer programming, second phase binary quadratic optimization with penalty terms and appliance constraints.
result Proposed method successfully reconstructs appliance signatures, overcoming previous optimization-based methods' limitations.
Proposes an autonomous IDS using multiple learning techniques.
problem Autonomous and zero-day attack detection in IDS.
method Parallel use of GRU, CNN, and random forest; majority vote and OR logic combination.
result Achieved high accuracy (87.28%) on NSL-KDD's 'KDDTest+' dataset.
MixUp is a recently proposed data-augmentation scheme, which linearly interpolates a random pair of training examples and correspondingly the one-hot representations of their labels. Training deep neural networks with such additional data is shown capable of significantly improving the predictive accuracy of the curren…
Survey visual analytics methods for detecting anomalous user behaviors.
problem Understanding and detecting anomalous user behaviors in various domains.
method Survey and classification of visual analytics methods in four categories.
result Discussion of findings and potential research directions.
Several problems such as network intrusion, community detection, and disease outbreak can be described by observations attributed to nodes or edges of a graph. In these applications presence of intrusion, community or disease outbreak is characterized by novel observations on some unknown connected subgraph. These prob…
This paper improves AI defenses against network attacks using ML and adversarial learning.
problem Protecting personal data from sophisticated network attacks.
method Unified multi-modal dataset, machine learning for detection, adversarial learning for synthetic data generation.
result Stable ML models for intrusion detection and high-fidelity synthetic data.
Maximising the detection of intrusions is a fundamental and often critical aim of perimeter surveillance. Commonly, this requires a decision-maker to optimally allocate multiple searchers to segments of the perimeter. We consider a scenario where the decision-maker may sequentially update the searchers' allocation, lea…
Paper improves voice trigger detection for privacy-centric smart assistants.
problem Mitigating false triggers in voice-activated smart assistants.
method Analyzing ASR lattices using graph neural networks (GNN).
result GNNs effectively reduce false triggers by ~87% at 99% true positive rate.
Study efficient resource allocation for detecting extreme values.
problem Efficiently allocate limited resources to detect extreme values in various fields.
method Proposes ExtremeHunter algorithm for sequential resource allocation under limited feedback.
result Demonstrates ExtremeHunter outperforms oracle policy in detecting extreme values.