AI Solutions for MDS: Artificial Intelligence Techniques for Misuse Detection and Localisation in Telecommunication Environments

This report considers the application of Articial Intelligence (AI) techniques to the problem of misuse detection and misuse localisation within telecommunications environments. A broad survey of techniques is provided, that covers inter alia rule based systems, model-based systems, case based reasoning, pattern matching, clustering and feature extraction, articial neural networks, genetic algorithms, arti cial immune systems, agent based systems, data mining and a variety of hybrid approaches. The report then considers the central issue of event correlation, that is at the heart of many misuse detection and localisation systems. The notion of being able to infer misuse by the correlation of individual temporally distributed events within a multiple data stream environment is explored, and a range of techniques, covering model based approaches, `programmed' AI and machine learning paradigms. It is found that, in general, correlation is best achieved via rule based approaches, but that these suffer from a number of drawbacks, such as the difculty of developing and maintaining an appropriate knowledge base, and the lack of ability to generalise from known misuses to new unseen misuses. Two distinct approaches are evident. One attempts to encode knowledge of known misuses, typically within rules, and use this to screen events. This approach cannot generally detect misuses for which it has not been programmed, i.e. it is prone to issuing false negatives. The other attempts to `learn' the features of event patterns that constitute normal behaviour, and, by observing patterns that do not match expected behaviour, detect when a misuse has occurred. This approach is prone to issuing false positives, i.e. inferring misuse from innocent patterns of behaviour that the system was not trained to recognise. Contemporary approaches are seen to favour hybridisation, often combining detection or localisation mechanisms for both abnormal and normal behaviour, the former to capture known cases of misuse, the latter to capture unknown cases. In some systems, these mechanisms even work together to update each other to increase detection rates and lower false positive rates. It is concluded that hybridisation offers the most promising future direction, but that a rule or state based component is likely to remain, being the most natural approach to the correlation of complex events. The challenge, then, is to mitigate the weaknesses of canonical programmed systems such that learning, generalisation and adaptation are more readily facilitated

A management architecture for active networks

In this paper we present an architecture for network and applications management, which is based on the Active Networks paradigm and shows the advantages of network programmability. The stimulus to develop this architecture arises from an actual need to manage a cluster of active nodes, where it is often required to redeploy network assets and modify nodes connectivity. In our architecture, a remote front-end of the managing entity allows the operator to design new network topologies, to check the status of the nodes and to configure them. Moreover, the proposed framework allows to explore an active network, to monitor the active applications, to query each node and to install programmable traps. In order to take advantage of the Active Networks technology, we introduce active SNMP-like MIBs and agents, which are dynamic and programmable. The programmable management agents make tracing distributed applications a feasible task. We propose a general framework that can inter-operate with any active execution environment. In this framework, both the manager and the monitor front-ends communicate with an active node (the Active Network Access Point) through the XML language. A gateway service performs the translation of the queries from XML to an active packet language and injects the code in the network. We demonstrate the implementation of an active network gateway for PLAN (Packet Language for Active Networks) in a forty active nodes testbed. Finally, we discuss an application of the active management architecture to detect the causes of network failures by tracing network events in time

A management architecture for active networks

In this paper we present an architecture for network and applications management, which is based on the Active Networks paradigm and shows the advantages of network programmability. The stimulus to develop this architecture arises from an actual need to manage a cluster of active nodes, where it is often required to redeploy network assets and modify nodes connectivity. In our architecture, a remote front-end of the managing entity allows the operator to design new network topologies, to check the status of the nodes and to configure them. Moreover, the proposed framework allows to explore an active network, to monitor the active applications, to query each node and to install programmable traps. In order to take advantage of the Active Networks technology, we introduce active SNMP-like MIBs and agents, which are dynamic and programmable. The programmable management agents make tracing distributed applications a feasible task. We propose a general framework that can inter-operate with any active execution environment. In this framework, both the manager and the monitor front-ends communicate with an active node (the Active Network Access Point) through the XML language. A gateway service performs the translation of the queries from XML to an active packet language and injects the code in the network. We demonstrate the implementation of an active network gateway for PLAN (Packet Language for Active Networks) in a forty active nodes testbed. Finally, we discuss an application of the active management architecture to detect the causes of network failures by tracing network events in time

Smart Home and Artificial Intelligence as Environment for the Implementation of New Technologies

The technologies of a smart home and artificial intelligence (AI) are now inextricably linked. The perception and consideration of these technologies as a single system will make it possible to significantly simplify the approach to their study, design and implementation. The introduction of AI in managing the infrastructure of a smart home is a process of irreversible close future at the level with personal assistants and autopilots. It is extremely important to standardize, create and follow the typical models of information gathering and device management in a smart home, which should lead in the future to create a data analysis model and decision making through the software implementation of a specialized AI. AI techniques such as multi-agent systems, neural networks, fuzzy logic will form the basis for the functioning of a smart home in the future. The problems of diversity of data and models and the absence of centralized popular team decisions in this area significantly slow down further development. A big problem is a low percentage of open source data and code in the smart home and the AI when the research results are mostly unpublished and difficult to reproduce and implement independently. The proposed ways of finding solutions to models and standards can significantly accelerate the development of specialized AIs to manage a smart home and create an environment for the emergence of native innovative solutions based on analysis of data from sensors collected by monitoring systems of smart home. Particular attention should be paid to the search for resource savings and the profit from surpluses that will push for the development of these technologies and the transition from a level of prospect to technology exchange and the acquisition of benefits.The technologies of a smart home and artificial intelligence (AI) are now inextricably linked. The perception and consideration of these technologies as a single system will make it possible to significantly simplify the approach to their study, design and implementation. The introduction of AI in managing the infrastructure of a smart home is a process of irreversible close future at the level with personal assistants and autopilots. It is extremely important to standardize, create and follow the typical models of information gathering and device management in a smart home, which should lead in the future to create a data analysis model and decision making through the software implementation of a specialized AI. AI techniques such as multi-agent systems, neural networks, fuzzy logic will form the basis for the functioning of a smart home in the future. The problems of diversity of data and models and the absence of centralized popular team decisions in this area significantly slow down further development. A big problem is a low percentage of open source data and code in the smart home and the AI when the research results are mostly unpublished and difficult to reproduce and implement independently. The proposed ways of finding solutions to models and standards can significantly accelerate the development of specialized AIs to manage a smart home and create an environment for the emergence of native innovative solutions based on analysis of data from sensors collected by monitoring systems of smart home. Particular attention should be paid to the search for resource savings and the profit from surpluses that will push for the development of these technologies and the transition from a level of prospect to technology exchange and the acquisition of benefits

Exploratory study to explore the role of ICT in the process of knowledge management in an Indian business environment

In the 21st century and the emergence of a digital economy, knowledge and the knowledge base economy are rapidly growing. To effectively be able to understand the processes involved in the creating, managing and sharing of knowledge management in the business environment is critical to the success of an organization. This study builds on the previous research of the authors on the enablers of knowledge management by identifying the relationship between the enablers of knowledge management and the role played by information communication technologies (ICT) and ICT infrastructure in a business setting. This paper provides the findings of a survey collected from the four major Indian cities (Chennai, Coimbatore, Madurai and Villupuram) regarding their views and opinions about the enablers of knowledge management in business setting. A total of 80 organizations participated in the study with 100 participants in each city. The results show that ICT and ICT infrastructure can play a critical role in the creating, managing and sharing of knowledge in an Indian business environment