NDLI: A robust approach for on-line and off-line threat detection based on event tree similarity analysis

Content Provider	IEEE Xplore Digital Library
Author	Flammini, F. Pragliola, C. Pappalardo, A. Vittorini, V.
Copyright Year	2011
Description	Author affiliation: Ansaldo STS, Via Argine 425, Napoli, Italy (Flammini, F.; Pragliola, C.) \|\| Università di Napoli Federico II, Via Claudio 21, 80125, Italy (Pappalardo, A.; Vittorini, V.)
Abstract	The security of railway and mass-transit systems is increasingly dependant on the effectiveness of integrated Security Management Systems (SMS), which are meant to detect threats and to provide operators with information required for alarm verification purposes. In order to lower the false alarm rate and improve the detection reliability of threat scenarios, event correlation capabilities need to be integrated into the SMS. In this paper an existing approach based on a-priori defined event patterns is extended using a heuristic situation recognition approach which is more robust to both imperfect scenario modeling (human faults) and missed detections (sensor faults). The approach is based on similarity analysis between the event trees representing scenarios and it is effective both on-line and off-line. Applied on-line, it allows for an earlier and more fault-tolerant threat detection, since scenario matching is not required to be complete nor exact. Applied off-line, its effectiveness is twofold: first, it allows for detecting redundancies when updating the scenario repository; secondly, it enhances the post-event forensic search of suspicious behaviors not previously stored in the scenario repository. The strategy is being experimented in the context of railway protection.
Starting Page	414
Ending Page	419
File Size	406623
Page Count	6
File Format	PDF
ISBN	9781457708442
e-ISBN	9781457708459
e-ISBN	9781457708435
DOI	10.1109/AVSS.2011.6027364
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2011-08-30
Publisher Place	Austria
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Context Correlation Surveillance Humans Security Artificial intelligence
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

A Graph Similarity-Based Approach to Security Event Analysis Using Correlation Techniques

Threat-based evaluation for context-aware multimedia surveillance system

Cyber Threat Detection Based on Artificial Neural Networks Using Event Profiles

Effective threat detection for surveillance

New approaches for intrusion detection based on logs correlation

Video surveillance of interactions

Unmanned object detection for image surveillance systems

A graph similarity-based approach to security event analysis using correlation techniques.

A socio-technical approach for event detection in security critical infrastructure

A robust approach for on-line and off-line threat detection based on event tree similarity analysis

Similar Documents

A Graph Similarity-Based Approach to Security Event Analysis Using Correlation Techniques

Threat-based evaluation for context-aware multimedia surveillance system

Cyber Threat Detection Based on Artificial Neural Networks Using Event Profiles

Effective threat detection for surveillance

New approaches for intrusion detection based on logs correlation

Video surveillance of interactions

Unmanned object detection for image surveillance systems

A graph similarity-based approach to security event analysis using correlation techniques.

A socio-technical approach for event detection in security critical infrastructure

A robust approach for on-line and off-line threat detection based on event tree similarity analysis