Detection of intrusions in information systems by sequential change-point methods

DOI10.1016/j.stamet.2005.05.003zbMath1248.94032OpenAlexW2091083310MaRDI QIDQ713713

Alexander G. Tartakovsky, Rudolf B. Blažek, Hongjoong Kim, Boris L. Rosovskii

Publication date: 19 October 2012

Published in: Statistical Methodology (Search for Journal in Brave)

Full work available at URL: https://doi.org/10.1016/j.stamet.2005.05.003

zbMATH Keywords

sequential testschange-point detectiondenial of serviceintrusion detectionPage's testcumulative summultichannel information systemsrapid detection

Mathematics Subject Classification ID

Applications of statistics in engineering and industry; control charts (62P30) Communication networks in operations research (90B18) Network design and communication in computer systems (68M10) Detection theory in information and communication theory (94A13) Channel models (including quantum) in information and communication theory (94A40)

Related Items

Adaptive likelihood ratio approaches for the detection of space-time disease clusters ⋮ Monitoring a Bernoulli process subject to gradual changes in the success rates of a sequence of Bernoulli random variables ⋮ On the strategy of supply chain collaboration based on dynamic inventory target level management: a theory of constraint perspective ⋮ Asymptotically optimal quickest change detection in multistream data -- Part 1: General stochastic models ⋮ Bayesian Models Applied to Cyber Security Anomaly Detection Problems ⋮ A setwise EWMA scheme for monitoring high-dimensional datastreams ⋮ Detecting an intermittent change of unknown duration ⋮ Unnamed Item ⋮ Multidecision Quickest Change-Point Detection: Previous Achievements and Open Problems ⋮ Decision and game theory for security. Second international conference, GameSec 2011, College Park, MD, Maryland, USA, November 14--15, 2011. Proceedings ⋮ Is Average Run Length to False Alarm Always an Informative Criterion? ⋮ Asymptotically Optimal Quickest Change Detection in Distributed Sensor Systems ⋮ Asymptotic statistical properties of communication-efficient quickest detection schemes in sensor networks ⋮ Asymptotically optimal pointwise and minimax quickest change-point detection for dependent data ⋮ Monitoring a Poisson process in several categories subject to changes in the arrival rates ⋮ Sequential Anomaly Detection in Wireless Sensor Networks and Effects of Long-Range Dependent Data ⋮ Bayesian Quickest Detection in Sensor Arrays ⋮ An Accurate Method for Determining the Pre-Change Run Length Distribution of the Generalized Shiryaev-Roberts Detection Procedure ⋮ Discussion on “Change-Points: From Sequential Detection to Biology and Back” by David Siegmund ⋮ Hypothesis designs for three-hypothesis test problems ⋮ Theory and applications of a new methodology for the random sequential probability ratio test ⋮ Statistical Control of Multiple-Stream Processes: A Literature Review ⋮ On the Wiener disorder problem ⋮ Monitoring a Poisson process subject to gradual changes in the arrival rates ⋮ Discussion on “Sequential detection/isolation of abrupt changes” by Igor V. Nikiforov ⋮ Quickest change point detection with multiple postchange models ⋮ Distributed detection/localization of change-points in high-dimensional network traffic data ⋮ A discussion on ``Detection of intrusions in information systems by sequential change-point methods by Tartakovsky, Rozovskii, Blažek, and Kim ⋮ Sequential tracking of a hidden Markov chain using point process observations ⋮ Adaptive threshold computation for CUSUM-type procedures in change detection and isolation problems ⋮ Online multivariate changepoint detection with type I error control and constant time/memory updates per series ⋮ Optimal detection of transition probability change in random sequence ⋮ Malware Family Discovery Using Reversible Jump MCMC Sampling of Regimes ⋮ Monitoring a Poisson process subject to gradual changes in the arrival rates where the arrival rates are unknown

Cites Work

• Unnamed Item
• Unnamed Item
• Unnamed Item
• Unnamed Item
• Unnamed Item
• Unnamed Item
• Unnamed Item
• Unnamed Item
• Unnamed Item
• Unnamed Item
• Unnamed Item
• Sequential analysis. Tests and confidence intervals
• Optimal detection of a change in distribution
• Optimal stopping times for detecting changes in distributions
• Efficiency of the generalized Neyman-Pearson test for detecting changes in a multichannel system
• Comparison of some sequential rules for detecting changes in distributions
• SPRT and CUSUM in hidden Markov models
• Asymptotic operating characteristics of an optimal change point detection in hidden Markov models
• Asymptotic properties of CUSUM and Shiryaev's procedures for detecting a change in a nonhomogeneous Gaussian process
• Asymptotic optimality of certain multihypothesis sequential tests: Non-i. i. d. case
• Some One-Sided Theorems on the Tail Distribution of Sample Sums with Applications to the Last Time and Largest Excess of Boundary Crossings
• Multihypothesis sequential probability ratio tests. II. Accurate asymptotic expansions for the expected sample size
• Multihypothesis sequential probability ratio tests .I. Asymptotic optimality
• A novel approach to detection of intrusions in computer networks via adaptive sequential and batch-sequential change-point detection methods
• Information bounds and quick detection of parameter changes in stochastic systems
• Detecting changes in probabilities of a multi—component process
• On Optimum Methods in Quickest Detection Problems
• Procedures for Reacting to a Change in Distribution
• General Asymptotic Bayesian Theory of Quickest Change Detection
• Complete Convergence and the Law of Large Numbers
• CONTINUOUS INSPECTION SCHEMES