Adding Contextual Information to Intrusion Detection Systems Using Fuzzy Cognitive Maps

The file attached to this record is the author's final peer reviewed version. The Publisher's final version can be found by following the DOI link.In the last few years there has been considerable increase in the efficiency of Intrusion Detection Systems (IDSs). However, networks are still the victim of attacks. As the complexity of these attacks keeps increasing, new and more robust detection mechanisms need to be developed. The next generation of IDSs should be designed incorporating reasoning engines supported by contextual information about the network, cognitive information and situational awareness to improve their detection results. In this paper, we propose the use of a Fuzzy Cognitive Map (FCM) in conjunction with an IDS to incorporate contextual information into the detection process. We have evaluated the use of FCMs to adjust the Basic Probability Assignment (BPA) values defined prior to the data fusion process, which is crucial for the IDS that we have developed. The experimental results that we present verify that FCMs can improve the efficiency of our IDS by reducing the number of false alarms, while not affecting the number of correct detections

Using the Pattern-of-Life in Networks to Improve the Effectiveness of Intrusion Detection Systems

The file attached to this record is the author's final peer reviewed version. The Publisher's final version can be found by following the DOI link.As the complexity of cyber-attacks keeps increasing, new and more robust detection mechanisms need to be developed. The next generation of Intrusion Detection Systems (IDSs) should be able to adapt their detection characteristics based not only on the measureable network traffic, but also on the available high- level information related to the protected network to improve their detection results. We make use of the Pattern-of-Life (PoL) of a network as the main source of high-level information, which is correlated with the time of the day and the usage of the network resources. We propose the use of a Fuzzy Cognitive Map (FCM) to incorporate the PoL into the detection process. The main aim of this work is to evidence the improved the detection performance of an IDS using an FCM to leverage on network related contextual information. The results that we present verify that the proposed method improves the effectiveness of our IDS by reducing the total number of false alarms; providing an improvement of 9.68% when all the considered metrics are combined and a peak improvement of up to 35.64%, depending on particular metric combination

Why Modeling Complex Dynamic Systems using Fuzzy Cognitive Maps?

The difficult problem of modeling Complex Dynamic Systems (CDS) is carefully reviewed. Main characteristics of CDS are considered and analyzed. Today’s mathematical models and approaches cannot provide satisfactory answers to the challenging problems of the society. The key problem of complex dynamic systems and control theory consists in the development of methods of qualitative analysis of the dynamics and behavior of such systems and in the construction of efficient control algorithms for their efficient operation. The purpose of control to bring the system to a point of its phase space which corresponds to maximal or minimal value of the chosen efficiency criterion is reviewed and analyzed. The reasons for using Fuzzy Cognitive Maps (FCMs) in modeling Complex dynamic Systems are provided. The basics of FCMs are briefly presented. An illustrative example is considered and interesting results are presented and discusse

Why Modeling Complex Dynamic Systems using Fuzzy Cognitive Maps?

The difficult problem of modeling Complex Dynamic Systems (CDS) is carefully reviewed. Main characteristics of CDS are considered and analyzed. Today’s mathematical models and approaches cannot provide satisfactory answers to the challenging problems of the society. The key problem of complex dynamic systems and control theory consists in the development of methods of qualitative analysis of the dynamics and behavior of such systems and in the construction of efficient control algorithms for their efficient operation. The purpose of control to bring the system to a point of its phase space which corresponds to maximal or minimal value of the chosen efficiency criterion is reviewed and analyzed. The reasons for using Fuzzy Cognitive Maps (FCMs) in modeling Complex dynamic Systems are provided. The basics of FCMs are briefly presented. An illustrative example is considered and interesting results are presented and discussed

Modelling stakeholder perceptions to assess Green Infrastructures potential in agriculture through fuzzy logic: A tool for participatory governance

Abstract Solutions like Green Infrastructures can restore and maintain key regulative ecosystem services capable of mitigating disaster risk and contributing to climate change adaptation. Given the vulnerabilities that affect agriculture and its role in national economies, GI can play an important role in managing trade-offs between conflicting ecosystem services. However, their use is still lagging behind, and socio-economic dynamics in their uptake in the agricultural sector are partially disregarded. The uncertainty involved in the modelling of ecological processes can be reduced through the use of participatory processes and the involvement of relevant stakeholders to sustain decision-making processes. This article intends to assess stakeholders' perceptions on the implementation of Green Infrastructures in agriculture by capturing critical barriers and facilitators. The implementation of such Green Infrastructures policies is associated to different climate change trends in order to understand the effect of different scenarios on rural development. The study uses fuzzy logic to elicit the stakeholders' needs. The key results show that when there is uncertainty in the state of climate change trends, it is always more efficient to adopt progressive policies investing in the development and diffusion of Green Infrastructures

Learning FCMs with multi-local and balanced memetic algorithms for forecasting industrial drying processes

In this paper, we propose a Fuzzy Cognitive Map (FCM) learning approach with a multi-local search in balanced memetic algorithms for forecasting industrial drying processes. The first contribution of this paper is to propose a FCM model by an Evolutionary Algorithm (EA), but the resulted FCM model is improved by a multi-local and balanced local search algorithm. Memetic algorithms can be tuned with different local search strategies (CMA-ES, SW, SSW and Simplex) and the balance of the effort between global and local search. To do this, we applied the proposed approach to the forecasting of moisture loss in industrial drying process. The thermal drying process is a relevant one used in many industrial processes such as food industry, biofuels production, detergents and dyes in powder production, pharmaceutical industry, reprography applications, textile industries, and others. This research also shows that exploration of the search space is more relevant than finding local optima in the FCM models tested

A Case Study on Time-Interval Fuzzy Cognitive Maps in a Complex Organization

Temporal issues within modeling organizational systems are examined generally and with fuzzy cognitive maps. These maps give the opportunity to consider temporal factors when studying organizational models. The knowledge we gain about the system is useful when the aim is not to optimize time intervals in well-known and instrumented contexts, but also to discover the behavior of the system while different temporal factors are implemented by the management. We will present an adapted resolution for including these factors as key elements in organizational models with fuzzy cognitive map examples for middle and back office application.Peer reviewe

Adding contextual information to intrusion detection systems using fuzzy cognitive maps

In the last few years there has been considerable increase in the efficiency of Intrusion Detection Systems (IDSs). However, networks are still the victim of attacks. As the complexity of these attacks keeps increasing, new and more robust detection mechanisms need to be developed. The next generation of IDSs should be designed incorporating reasoning engines supported by contextual information about the network, cognitive information from the network users and situational awareness to improve their detection results. In this paper, we propose the use of a Fuzzy Cognitive Map (FCM) in conjunction with an IDS to incorporate contextual information into the detection process. We have evaluated the use of FCMs to adjust the Basic Probability Assignment (BPA) values defined prior to the data fusion process, which is crucial for the IDS that we have developed. The results that we present verify that FCMs can improve the efficiency of our IDS by reducing the number of false alarms, while not affecting the number of correct detections

Statistical Approach to Fuzzy Cognitive Maps

Fuzzy cognitive maps are studied from statistical standpoint. An analogy between these maps and linear regression and logistic regression models is drawn. Practical examples are also provided.Peer reviewe