Detection of intrusions in information systems by sequential change-point methods

DOI10.1016/j.stamet.2005.05.003zbMath1248.94032MaRDI QIDQ713713

Alexander G. Tartakovsky, Rudolf B. Blažek, Hongjoong Kim, Boris L. Rosovskii

Publication date: 19 October 2012

Published in: Statistical Methodology (Search for Journal in Brave)

Full work available at URL: https://doi.org/10.1016/j.stamet.2005.05.003

zbMATH Keywords

sequential tests; change-point detection; denial of service; intrusion detection; Page's test; cumulative sum; multichannel information systems; rapid detection

Mathematics Subject Classification ID

62P30: Applications of statistics in engineering and industry; control charts

90B18: Communication networks in operations research

68M10: Network design and communication in computer systems

94A13: Detection theory in information and communication theory

94A40: Channel models (including quantum) in information and communication theory

Related Items

Asymptotic statistical properties of communication-efficient quickest detection schemes in sensor networks, Sequential Anomaly Detection in Wireless Sensor Networks and Effects of Long-Range Dependent Data, Bayesian Quickest Detection in Sensor Arrays, Discussion on “Change-Points: From Sequential Detection to Biology and Back” by David Siegmund, An Accurate Method for Determining the Pre-Change Run Length Distribution of the Generalized Shiryaev-Roberts Detection Procedure, Discussion on “Sequential detection/isolation of abrupt changes” by Igor V. Nikiforov, A discussion on ``Detection of intrusions in information systems by sequential change-point methods by Tartakovsky, Rozovskii, Blažek, and Kim, Decision and game theory for security. Second international conference, GameSec 2011, College Park, MD, Maryland, USA, November 14--15, 2011. Proceedings, Theory and applications of a new methodology for the random sequential probability ratio test, Distributed detection/localization of change-points in high-dimensional network traffic data, Monitoring a Poisson process in several categories subject to changes in the arrival rates, Hypothesis designs for three-hypothesis test problems, On the Wiener disorder problem, Sequential tracking of a hidden Markov chain using point process observations, Adaptive threshold computation for CUSUM-type procedures in change detection and isolation problems, Adaptive likelihood ratio approaches for the detection of space-time disease clusters, On the strategy of supply chain collaboration based on dynamic inventory target level management: a theory of constraint perspective, Asymptotically optimal pointwise and minimax quickest change-point detection for dependent data, Statistical Control of Multiple-Stream Processes: A Literature Review, Optimal detection of transition probability change in random sequence, Malware Family Discovery Using Reversible Jump MCMC Sampling of Regimes, Multidecision Quickest Change-Point Detection: Previous Achievements and Open Problems, Is Average Run Length to False Alarm Always an Informative Criterion?, Asymptotically Optimal Quickest Change Detection in Distributed Sensor Systems

Cites Work

• Unnamed Item
• Unnamed Item
• Unnamed Item
• Unnamed Item
• Unnamed Item
• Unnamed Item
• Unnamed Item
• Unnamed Item
• Unnamed Item
• Unnamed Item
• Unnamed Item
• Sequential analysis. Tests and confidence intervals
• Optimal detection of a change in distribution
• Optimal stopping times for detecting changes in distributions
• Efficiency of the generalized Neyman-Pearson test for detecting changes in a multichannel system
• Comparison of some sequential rules for detecting changes in distributions
• SPRT and CUSUM in hidden Markov models
• Asymptotic operating characteristics of an optimal change point detection in hidden Markov models
• Asymptotic properties of CUSUM and Shiryaev's procedures for detecting a change in a nonhomogeneous Gaussian process
• Asymptotic optimality of certain multihypothesis sequential tests: Non-i. i. d. case
• Some One-Sided Theorems on the Tail Distribution of Sample Sums with Applications to the Last Time and Largest Excess of Boundary Crossings
• Multihypothesis sequential probability ratio tests. II. Accurate asymptotic expansions for the expected sample size
• Multihypothesis sequential probability ratio tests .I. Asymptotic optimality
• A novel approach to detection of intrusions in computer networks via adaptive sequential and batch-sequential change-point detection methods
• Information bounds and quick detection of parameter changes in stochastic systems
• Detecting changes in probabilities of a multi—component process
• On Optimum Methods in Quickest Detection Problems
• Procedures for Reacting to a Change in Distribution
• General Asymptotic Bayesian Theory of Quickest Change Detection
• Complete Convergence and the Law of Large Numbers
• CONTINUOUS INSPECTION SCHEMES