Detection of advanced persistent threat using machine-learning correlation analysis

As one of the most serious types of cyber attack, Advanced Persistent Threats (APT) have caused major concerns on a global scale. APT refers to a persistent, multi-stage attack with the intention to compromise the system and gain information from the targeted system, which has the potential to cause significant damage and substantial financial loss. The accurate detection and prediction of APT is an ongoing challenge. This work proposes a novel machine learning-based system entitled MLAPT, which can accurately and rapidly detect and predict APT attacks in a systematic way. The MLAPT runs through three main phases: (1) Threat detection, in which eight methods have been developed to detect different techniques used during the various APT steps. The implementation and validation of these methods with real traffic is a significant contribution to the current body of research; (2) Alert correlation, in which a correlation framework is designed to link the outputs of the detection methods, aims to identify alerts that could be related and belong to a single APT scenario; and (3) Attack prediction, in which a machine learning-based prediction module is proposed based on the correlation framework output, to be used by the network security team to determine the probability of the early alerts to develop a complete APT attack. MLAPT is experimentally evaluated and the presented sy

Correlation effects during liquid infiltration into hydrophobic nanoporous mediums

Correlation effects arising during liquid infiltration into hydrophobic porous medium are considered. On the basis of these effects a mechanism of energy absorption at filling porous medium by nonwetting liquid is suggested. In accordance with this mechanism, the absorption of mechanical energy is a result expenditure of energy for the formation of menisci in the pores on the shell of the infinite cluster and expenditure of energy for the formation of liquid-porous medium interface in the pores belonging to the infinite cluster of filled pores. It was found that in dependences on the porosity and, consequently, in dependences on the number of filled pores neighbors, the thermal effect of filling can be either positive or negative and the cycle of infiltration-defiltration can be closed with full outflow of liquid. It can occur under certain relation between percolation properties of porous medium and the energy characteristics of the liquid-porous medium interface and the liquid-gas interface. It is shown that a consecutive account of these correlation effects and percolation properties of the pores space during infiltration allow to describe all experimental data under discussion

Heavy Top Quark Searches in the Di-Lepton Mode at the Tevatron

We present the results of a detailed study of the effects of $b$-tagging on the heavy top-quark signal and backgrounds for the modes of the di-lepton plus two high transverse energy jets at the Fermilab Tevatron. The general characteristics of the heavy top-quark signal events are also discussed so that a comparison can be made between $b$-tagging and imposing stringent kinematical cuts to eliminate backgrounds.Comment: uses PHYZZX and TABLES macros, 10 pages, four figures not included (available by request), FERMILAB-Pub-93/105-

Searching for a heavy Higgs boson via the H --> l nu jj decay mode at the CERN LHC

The discovery of a heavy Higgs boson with mass up to m_H = 1 TeV at the CERN LHC is possible in the H--> W^+W^- --> l nu jj decay mode. The weak boson scattering signal and backgrounds from t\bar tjj and from W+jets production are analyzed with parton level Monte Carlo programs which are built on full tree level amplitudes for all subprocesses. The use of double jet tagging and the reconstruction of the W invariant mass reduce the combined backgrounds to the same level as the Higgs signal. A central mini-jet veto, which distinguishes the different gluon radiation patterns of the hard processes, further improves the signal to background ratio to about 2.5:1, with a signal cross section of 1 fb. The jet energy asymmetry of the W --> jj decay will give a clear signature of the longitudinal polarization of the W's in the final event sample.Comment: 23 pages (with 7 embedded figures), Revtex, uses epsf.sty. Z-compressed postscript version also available at http://phenom.physics.wisc.edu/pub/preprints/1997/madph-97-1017.ps.Z or at ftp://phenom.physics.wisc.edu/pub/preprints/1997/madph-97-1017.ps.

Graphene field-effect-transistors with high on/off current ratio and large transport band gap at room temperature

Graphene is considered to be a promising candidate for future nano-electronics due to its exceptional electronic properties. Unfortunately, the graphene field-effect-transistors (FETs) cannot be turned off effectively due to the absence of a bandgap, leading to an on/off current ratio typically around 5 in top-gated graphene FETs. On the other hand, theoretical investigations and optical measurements suggest that a bandgap up to a few hundred meV can be created by the perpendicular E-field in bi-layer graphenes. Although previous carrier transport measurements in bi-layer graphene transistors did indicate a gate-induced insulating state at temperature below 1 Kelvin, the electrical (or transport) bandgap was estimated to be a few meV, and the room temperature on/off current ratio in bi-layer graphene FETs remains similar to those in single-layer graphene FETs. Here, for the first time, we report an on/off current ratio of around 100 and 2000 at room temperature and 20 K, respectively in our dual-gate bi-layer graphene FETs. We also measured an electrical bandgap of >130 and 80 meV at average electric displacements of 2.2 and 1.3 V/nm, respectively. This demonstration reveals the great potential of bi-layer graphene in applications such as digital electronics, pseudospintronics, terahertz technology, and infrared nanophotonics.Comment: 3 Figure

Microwave-induced pi-junction transition in a superconductor / quantum-dot / superconductor structure

Using the nonequilibrium Green function, we show that microwave irradiation can reverse the supercurrent flowing through a superconductor / quantum-dot / superconductor structure. In contrast with the conventional sideband effect in normal-metal / quantum-dot / normal-metal junctions, the photon-assisted structures appear near $E_{0}=\frac{n}{2}\hbar \omega (n=\pm 1,\pm 2...)$, where $E_{0}$ is the resonant energy level of the quantum dot and $\omega$ is the frequency of microwave field. Each photon-assisted structure is composed of a negative and a positive peak, with an abrupt jump from the negative peak to the positive peak around $E_{0}=\frac{n}{2}\hbar \omega$. The microwave-induced $\pi$-junction transition is interpreted in the picture of photon-assisted Andreev bound states, which are formed due to multiple photon-assisted Andreev reflection between the two superconductors. Moreover, the main resonance located at $E_{0}=0$ can also be reversed with proper microwave strength and frequency.Comment: 10 pagres, 3 figure

Standard Model Higgs Physics at a 4 TeV Upgraded Tevatron

We compute an array of Standard Model Higgs boson (\hsm) signals and backgrounds for a possible upgrade of the Tevatron to E_{\rm cm}=4\tev. Taking \mt\geq 140\gev, and assuming a total accumulated luminosity of L=30\fbi, we find that a Standard Model Higgs boson with \mhsm\lsim 110\gev could almost certainly be detected using the \wpm\hsm\rta l\nu b\anti b mode. A Higgs boson with mass between \sim 120\gev and \sim 140\gev or above \sim 230-250\gev almost certainly would not be seen. A Higgs boson with \mhsm\sim 150\gev or 200\lsim\mhsm\lsim 230-250\gev has a decent chance of being detected in the ZZ\rta 4l mode. There would also be some possibility of discovering the \hsm in the WW\rta l\nu jj mode for 150\lsim\mhsm\lsim 200\gev. Finally, hints of an event excess in the WW\rta ll \nu\nu mode due to the \hsm might emerge for 140\lsim\mhsm\lsim 180\gev. Given the difficult nature of the Higgs boson signals for \mhsm values beyond the reach of LEP-200, and the discontinuous \mhsm range that could potentially be probed, justification of an upgrade of the Tevatron to 4\tev on the basis of its potential for Standard Model Higgs boson discovery would seem inappropriate.Comment: 21 pages; requires phyzzx.tex and tables.tex; full postscript file including embedded figures available via anonymous ftp at ucdhep.ucdavis.edu as [anonymous.gunion]4tev.ps, preprint UCD-94-1

Enhancing the top signal at Tevatron using Neural Nets

We show that Neural Nets can be useful for top analysis at Tevatron. The main features of $t\bar t$ and background events on a mixed sample are projected in a single output, which controls the efficiency and purity of the $t\bar t$ signal.Comment: 11 pages, 6 figures (not included and available from the authors), Latex, UB-ECM-PF 94/1

Collective dynamics of two-mode stochastic oscillators

We study a system of two-mode stochastic oscillators coupled through their collective output. As a function of a relevant parameter four qualitatively distinct regimes of collective behavior are observed. In an extended region of the parameter space the periodicity of the collective output is enhanced by the considered coupling. This system can be used as a new model to describe synchronization-like phenomena in systems of units with two or more oscillation modes. The model can also explain how periodic dynamics can be generated by coupling largely stochastic units. Similar systems could be responsible for the emergence of rhythmic behavior in complex biological or sociological systems.Comment: 4 pages, RevTex, 5 figure