Toward an efficient ontology-based event correlation in SIEM

Cooperative intrusion detection use several intrusion detection systems (IDS) and analyzers in order to build a reliable overview of the monitored system trough a central security information and event management system (SIEM). In such environment, the definition of a shared vocabulary describing the exchanged information between tools is prominent. Since these pieces of information are structured, we propose in this paper to use an ontological representation based on Description Logics (DLs) which is a powerful tool for knowledge representation. Moreover, DLs are able to ensure a decidable reasoning. An alert correlation prototype is presented using this ontology, and an illustrative attack scenario is carried out to show the usefulness of the proposed ontolog

Comparison of the CES-D and PHQ-9 depression scales in people with type 2 diabetes in Tehran, Iran

<p>Abstract</p> <p>Background</p> <p>The quality of life in patients with various chronic disorders, including diabetes has been directly affected by depression. Depression makes patients less likely to manage their self-care regimens. Accurate assessment of depression in diabetic populations is important to the treatment of depression in this group and may improve diabetes management. To our best knowledge, there are few studies that have looked for utilizing questionnaires in screening for depression among patients with diabetes in Iran. Therefore the aim of this study was to assess the efficacy and accuracy of the Center for Epidemiological Studies Depression (CES-D) scale and the Patient Health Questionnaire-9 (PHQ-9), in comparison with clinical interview in people with type 2 diabetes.</p> <p>Methods</p> <p>Outpatients who attended diabetes clinics at IEM were recruited on a consecutive basis between February 2009 and July 2009. Inclusion criteria included patients with type 2 diabetes who could fluently read and speak Persian, had no severe diabetes complications and no history of psychological disorders. The history of psychological disorders was ascertained through patients' medical files, taking history of any medications in this regard. The study design was explained to all patients and informed consent was obtained. Volunteer patients completed the Persian version of the questionnaires (CES-D and PHQ-9) and a psychiatrist interviewed them based on Structured Clinical Interview (SCID) for DSM-IV criteria.</p> <p>Results</p> <p>Of the 185 patients, 43.2% were diagnosed as having Major Depressive Disorder (MDD) based on the clinical interview, 47.6% with PHQ-9 and 61.62% with CES-D. The Area Under the Curve (AUC) for the total score of PHQ-9 was 0.829 ± 0.30. A cut-off score for PHQ-9 of ≥ 13 provided an optimal balance between sensitivity (73.80%) and specificity (76.20%). For CES-D the AUC for the total score was 0.861 ± 0.029. Optimal balance between sensitivity (78.80%) and specificity (77.1%) was provided at cut-off score of ≥ 23.</p> <p>Conclusions</p> <p>It could be concluded that the PHQ-9 and CES-D perform well as screening instruments, but in diagnosing major depressive disorder, a formal diagnostic process following the PHQ-9 and also the CES-D remains essential.</p

A muon-track reconstruction exploiting stochastic losses for large-scale Cherenkov detectors

IceCube is a cubic-kilometer Cherenkov telescope operating at the South Pole. The main goal of IceCube is the detection of astrophysical neutrinos and the identification of their sources. High-energy muon neutrinos are observed via the secondary muons produced in charge current interactions with nuclei in the ice. Currently, the best performing muon track directional reconstruction is based on a maximum likelihood method using the arrival time distribution of Cherenkov photons registered by the experiment\u27s photomultipliers. A known systematic shortcoming of the prevailing method is to assume a continuous energy loss along the muon track. However at energies >1 TeV the light yield from muons is dominated by stochastic showers. This paper discusses a generalized ansatz where the expected arrival time distribution is parametrized by a stochastic muon energy loss pattern. This more realistic parametrization of the loss profile leads to an improvement of the muon angular resolution of up to 20% for through-going tracks and up to a factor 2 for starting tracks over existing algorithms. Additionally, the procedure to estimate the directional reconstruction uncertainty has been improved to be more robust against numerical errors

A muon-track reconstruction exploiting stochastic losses for large-scale Cherenkov detectors

IceCube is a cubic-kilometer Cherenkov telescope operating at the South Pole. The main goal of IceCube is the detection of astrophysical neutrinos and the identification of their sources. High-energy muon neutrinos are observed via the secondary muons produced in charge current interactions with nuclei in the ice. Currently, the best performing muon track directional reconstruction is based on a maximum likelihood method using the arrival time distribution of Cherenkov photons registered by the experiment's photomultipliers. A known systematic shortcoming of the prevailing method is to assume a continuous energy loss along the muon track. However at energies $>1$ TeV the light yield from muons is dominated by stochastic showers. This paper discusses a generalized ansatz where the expected arrival time distribution is parametrized by a stochastic muon energy loss pattern. This more realistic parametrization of the loss profile leads to an improvement of the muon angular resolution of up to $20\%$ for through-going tracks and up to a factor 2 for starting tracks over existing algorithms. Additionally, the procedure to estimate the directional reconstruction uncertainty has been improved to be more robust against numerical errors

Multi-messenger searches via IceCube’s high-energy neutrinos and gravitational-wave detections of LIGO/Virgo

We summarize initial results for high-energy neutrino counterpart searches coinciding with gravitational-wave events in LIGO/Virgo\u27s GWTC-2 catalog using IceCube\u27s neutrino triggers. We did not find any statistically significant high-energy neutrino counterpart and derived upper limits on the time-integrated neutrino emission on Earth as well as the isotropic equivalent energy emitted in high-energy neutrinos for each event

Non-standard neutrino interactions in IceCube

Non-standard neutrino interactions (NSI) may arise in various types of new physics. Their existence would change the potential that atmospheric neutrinos encounter when traversing Earth matter and hence alter their oscillation behavior. This imprint on coherent neutrino forward scattering can be probed using high-statistics neutrino experiments such as IceCube and its low-energy extension, DeepCore. Both provide extensive data samples that include all neutrino flavors, with oscillation baselines between tens of kilometers and the diameter of the Earth. DeepCore event energies reach from a few GeV up to the order of 100 GeV - which marks the lower threshold for higher energy IceCube atmospheric samples, ranging up to 10 TeV. In DeepCore data, the large sample size and energy range allow us to consider not only flavor-violating and flavor-nonuniversal NSI in the μ−τ sector, but also those involving electron flavor. The effective parameterization used in our analyses is independent of the underlying model and the new physics mass scale. In this way, competitive limits on several NSI parameters have been set in the past. The 8 years of data available now result in significantly improved sensitivities. This improvement stems not only from the increase in statistics but also from substantial improvement in the treatment of systematic uncertainties, background rejection and event reconstruction