9 research outputs found
An ecological approach to anomaly detection: the EIA Model.
The presented work proposes a new approach for anomaly
detection. This approach is based on changes in a population of evolving agents under stress. If conditions are appropriate, changes in the population (modeled by the bioindicators) are representative of the alterations to the environment. This approach, based on an ecological view, improves functionally traditional approaches to the detection of anomalies.
To verify this assertion, experiments based on Network Intrussion Detection Systems are presented. The results are compared with the behaviour of other bioinspired approaches and machine learning techniques
A Risk Management Approach to the “Insider Threat”
Recent surveys indicate that the financial impact and operating losses due to insider intrusions are increasing. But these studies often disagree on what constitutes an "insider;" indeed, many define it only implicitly. In theory, appropriate selection of, and enforcement of, properly specified security policies should prevent legitimate users from abusing their access to computer systems, information, and other resources. However, even if policies could be expressed precisely, the natural mapping between the natural language expression of a security policy, and the expression of that policy in a form that can be implemented on a computer system or network, creates gaps in enforcement. This paper defines "insider" precisely, in terms of these gaps, and explores an access-based model for analyzing threats that include those usually termed "insider threats." This model enables an organization to order its resources based on the business value for that resource and of the information it contains. By identifying those users with access to high-value resources, we obtain an ordered list of users who can cause the greatest amount of damage. Concurrently with this, we examine psychological indicators in order to determine which users are at the greatest risk of acting inappropriately. We conclude by examining how to merge this model with one of forensic logging and auditing
Recommended from our members
A tool for promoting pollution prevention in facility design
The Pacific Northwest Laboratory{sup (a)} has developed a tool to assist in incorporating pollution prevention opportunities into the design of federal facilities. The pollution prevention electronic design guideline (EDG), developed for the U.S. Department of Energy (DOE), contains a database of 267 opportunities intended to help a decisionmaker (designer, engineer, or project manager) evaluate the applicability and potential benefits of implementing pollution prevention in a particular project. The EDG`s database was derived from both DOE and non-DOE sources including pollution prevention literature, industrial design personnel, and federal, state, and DOE sources. A key feature of the tool is the integration of photos, illustrations, and documentation to provide easy access to technical information on specific waste minimization opportunities in design. This paper describes the software tool, the Pollution Prevention Electronic Design Guideline (EDG). The EDG runs on a personal computer within the Microsoft Windows environment. The EDG is used with the P2DA Guidance Manual on a project-by-project basis. The P2DA process is analogous to the Waste Minimization Assessment method established by the U.S. Environmental Protection Agency for existing process waste streams. The EDG is introduced during the stage of the P2DA when design alternatives are being explored (after the anticipated waste streams have been quantified). As such, the EDG database is not exhaustive, and it is not computational (i.e., it does not compute the lifecycle impacts of implementation). Its purpose is to raise awareness of existing technologies and design practices that can improve resource efficiency or decrease waste generation over the entire life of the project (construction, operation, and decommissioning), and to provide a template for the documentation. Because design is an iterative process, the EDG is also intended to be revisited with each successive design stage
Recommended from our members
Incorporating pollution into US Department of Energy design projects: Case study results and participant feedback
Pollution prevention seeks to eliminate the release of all pollutants (hazardous and non-hazardous) to all media (land, air, and water). Beyond eliminating pollution at the source, pollution prevention includes energy conservation, water conservation, and protection of natural resources. Therefore, pollution prevention addresses not only wastes exiting a process, but materials entering and being consumed by the process as well. Historically, pollution prevention activities within the US Department of Energy (DOE) have focused on existing process waste streams -- the Pollution Prevention Opportunity Assessment (P2OA) being the central tool for identifying and implementing pollution prevention opportunities. However, it is estimated that 70% of a product`s total lifecycle cost is fixed by design (i.e., before the product, process, or facility ever gets built). By moving pollution prevention upstream into design, new opportunities emerge for minimizing waste not only during operations, but during construction and dismantlement of a facility as well. This is significant because it is estimated that the environmental consequences from construction of a building are comparable to a decade of operating the building, and demolition creates even more waste than construction
Recommended from our members
Pollution prevention electronic design guideline: A tool for identifying pollution prevention in facility design
The Pacific Northwest Laboratory has developed a tool to assist in incorporating pollution prevention opportunities into the design of federal facilities. The Pollution Prevention Environmental Design Guide for Engineers (P2-EDGE) was developed for the US Department of Energy (prior to its release this summer it had been referred to as the P2 electronic design guideline. P2-EDGE contains a database of 267 opportunities intended to help a decisionmaker (designer, engineer, or project manager) evaluate the applicability and potential benefits of implementing pollution prevention in a particular project. The P2-EDGE database was derived from both DOE and non-DOE sources including pollution prevention literature, industrial design personnel, and federal, state, and DOE sources. A key feature of the tool is the integration of photos, illustrations, and documentation to provide easy access to technical information on specific waste minimization opportunities in design