Disassortativity of computer networks

Network data is ubiquitous in cyber-security applications. Accurately modelling such data allows discovery of anomalous edges, subgraphs or paths, and is key to many signature-free cyber-security analytics. We present a recurring property of graphs originating from cyber-security applications, often considered a ‘corner case’ in the main literature on network data analysis, that greatly affects the performance of standard ‘off-the-shelf’ techniques. This is the property that similarity, in terms of network behaviour, does not imply connectivity, and in fact the reverse is often true. We call this disassortivity. The phenomenon is illustrated using network flow data collected on an enterprise network, and we show how Big Data analytics designed to detect unusual connectivity patterns can be improved

Network-wide anomaly detection via the Dirichlet process

Statistical anomaly detection techniques provide the next layer of cyber-security defences below traditional signature-based approaches. This article presents a scalable, principled, probability-based technique for detecting outlying connectivity behaviour within a directed interaction network such as a computer network. Independent Bayesian statistical models are fit to each message recipient in the network using the Dirichlet process, which provides a tractable, conjugate prior distribution for an unknown discrete probability distribution. The method is shown to successfully detect a red team attack in authentication data obtained from the enterprise network of Los Alamos National Laboratory

An algorithm for determining program feasibility of a multi-mode PAM commutator telemetry system Technical report no. 10

Algorithm formulation for evaluation of strapping arrangement programs for PAM multimode commutation system of Saturn telemetry syste

Fabrication and characterizations of proton-exchanged LiNbO3 waveguides fabricated by inductively coupled plasma technique

This Letter reports the use of an inductively coupled plasma technique for fabrication of proton-exchanged (PE) LiNbO3 (LN) waveguides. Planar and stripe waveguides have been formed in Y-cut LN which are difficult to obtain with the conventional molten acid method due to the occurrence of surface damage. Secondary ion mass spectrometry, scanning electron microscopy, and infrared absorption spectrum characterization results revealed that a uniform vertical PE profile with a single low order crystal phase has been directly obtained as a result of this unique process. X-ray photoelectron spectroscopy characterization of the treated surface revealed the existence of NbO as the cause for a sometimes darkened surface and confirms the ability to completely restore the surface to LN by oxygen plasma treatment. Atomic force microscopy measurement confirms that good surface quality has been maintained after regeneration of the surface to LN

Expanding Universe Illusion

We present a new induced movement illusion from global expansion or contraction in a triangular region filled with rising or falling textures. Objective global expansion or contraction induces lateral movement in the oblique edges of the triangle. The effects may be due to common and relative movements operating within a single texture

First Report of the Alfalfa Blotch Leafminer (Diptera: Agromyzidae), and Selected Parasites (Hymenoptera: Eulophidae) in Minnesota and Wisconsin, USA

Alfalfa blotch leafminer, Agromyza frontella, has been a serious pest of alfalfa, Medicago sativa, in the northeastern U.S. and in eastern Ontario, Canada. Until recently, the western edge of the A. frontella distribution in the U.S. was limited to eastern Ohio. We document for the first time, the occurrence of A. frontella in Minnesota and Wisconsin. Alfalfa stems damaged by A. frontella, based on adult feeding punctures, obvious blotched leafmining or the presence of larvae, were first found in 3 northern Minnesota coun­ties during October, 1994. Infested counties included Lake of the Woods, Cook and Lake, all bordering western Ontario, Canada. In 1995, A. frontella was again found in Cook and Lake counties, where 99-100% of the stems, and 18-35% of the trifoliates/stem, contained larvae or exhibited obvious feeding damage. In 1996, following a more expanded survey, a total of 11 and 5 counties, in Minnesota and Wisconsin, respectively, showed some level of A. frontella feeding damage (stem samples ranged from \u3c5 to 100% infested). Based on additional counties surveyed 11 October, 1996, where A. frontella was not found, we now have a reasonable estimate of the southern edge of the distribution in Minnesota and Wisconsin. A total of 2 and 6 A. frontella adults were identified from sweep-net samples taken from fields with obvious feeding damage during 1995 (Lake Co.) and 1996 (Cook Co,), respectively. Three eulophid (Hymenoptera) parasites were reared from A. frontella-infested alfalfa stems collected during October, 1994 in Cook Co., Minn., including: Diglyphus begini, D. pulchripes, and Diglyphus sp., prob. isaea, all of which are new records. Our hypothesis is that A. frontella moved into Minnesota from Ontario Canada, via alfalfa hay purchased by northern Minnesota growers

A new method for atmospheric detection of the CH3O2 radical

A new method for measurement of the methyl peroxy (CH3O2) radical has been developed using the conversion of CH3O2 into CH3O by excess NO with subsequent detection of CH3O by fluorescence assay by gas expansion (FAGE) with laser excitation at ca. 298 nm. The method can also directly detect CH3O, when no nitric oxide is added. Laboratory calibrations were performed to characterise the FAGE instrument sensitivity using the conventional radical source employed in OH calibration with conversion of a known concentration of OH into CH3O2 via reaction with CH4 in the presence of O2. Detection limits of 3.8 × 108 and 3.0 × 108 molecule cm−3 were determined for CH3O2 and CH3O respectively for a signal-to-noise ratio of 2 and 5 min averaging time. Averaging over 1 h reduces the detection limit for CH3O2 to 1.1 × 108 molecule cm−3, which is comparable to atmospheric concentrations. The kinetics of the second-order decay of CH3O2 via its self-reaction were observed in HIRAC (Highly Instrumented Reactor for Atmospheric Chemistry) at 295 K and 1 bar and used as an alternative method of calibration to obtain a calibration constant with overlapping error limits at the 1σ level with the result of the conventional method of calibration. The overall uncertainties of the two methods of calibrations are similar – 15 % for the kinetic method and 17 % for the conventional method – and are discussed in detail. The capability to quantitatively measure CH3O in chamber experiments is demonstrated via observation in HIRAC of CH3O formed as a product of the CH3O2 self-reaction