6,136 research outputs found
Tiresias: Predicting Security Events Through Deep Learning
With the increased complexity of modern computer attacks, there is a need for
defenders not only to detect malicious activity as it happens, but also to
predict the specific steps that will be taken by an adversary when performing
an attack. However this is still an open research problem, and previous
research in predicting malicious events only looked at binary outcomes (e.g.,
whether an attack would happen or not), but not at the specific steps that an
attacker would undertake. To fill this gap we present Tiresias, a system that
leverages Recurrent Neural Networks (RNNs) to predict future events on a
machine, based on previous observations. We test Tiresias on a dataset of 3.4
billion security events collected from a commercial intrusion prevention
system, and show that our approach is effective in predicting the next event
that will occur on a machine with a precision of up to 0.93. We also show that
the models learned by Tiresias are reasonably stable over time, and provide a
mechanism that can identify sudden drops in precision and trigger a retraining
of the system. Finally, we show that the long-term memory typical of RNNs is
key in performing event prediction, rendering simpler methods not up to the
task
Monte Carlo Algorithms for the Partition Function and Information Rates of Two-Dimensional Channels
The paper proposes Monte Carlo algorithms for the computation of the
information rate of two-dimensional source/channel models. The focus of the
paper is on binary-input channels with constraints on the allowed input
configurations. The problem of numerically computing the information rate, and
even the noiseless capacity, of such channels has so far remained largely
unsolved. Both problems can be reduced to computing a Monte Carlo estimate of a
partition function. The proposed algorithms use tree-based Gibbs sampling and
multilayer (multitemperature) importance sampling. The viability of the
proposed algorithms is demonstrated by simulation results
- …