114 research outputs found
anomalyDetection: Implementation of Augmented Network Log Anomaly Detection Procedures
As the number of cyber-attacks continues to grow on a daily basis, so does the delay in threat detection. For instance, in 2015, the Office of Personnel Management discovered that approximately 21.5 million individual records of Federal employees and contractors had been stolen. On average, the time between an attack and its discovery is more than 200 days. In the case of the OPM breach, the attack had been going on for almost a year. Currently, cyber analysts inspect numerous potential incidents on a daily basis, but have neither the time nor the resources available to perform such a task. anomalyDetection aims to curtail the time frame in which anomalous cyber activities go unnoticed and to aid in the efficient discovery of these anomalous transactions among the millions of daily logged events by i) providing an efficient means for pre-processing and aggregating cyber data for analysis by employing a tabular vector transformation and handling multicollinearity concerns; ii) offering numerous built-in multivariate statistical functions such as Mahalanobis distance, factor analysis, principal components analysis to identify anomalous activity, iii) incorporating the pipe operator (%\u3e%) to allow it to work well in the tidyverse workflow. Combined, anomalyDetection offers cyber analysts an efficient and simplified approach to break up network events into time-segment blocks and identify periods associated with suspected anomalies for further evaluation
Cyber Anomaly Detection: Using Tabulated Vectors and Embedded Analytics for Efficient Data Mining
Firewalls, especially at large organizations, process high velocity internet traffic and flag suspicious events and activities. Flagged events can be benign, such as misconfigured routers, or malignant, such as a hacker trying to gain access to a specific computer. Confounding this is that flagged events are not always obvious in their danger and the high velocity nature of the problem. Current work in firewall log analysis is manual intensive and involves manpower hours to find events to investigate. This is predominantly achieved by manually sorting firewall and intrusion detection/prevention system log data. This work aims to improve the ability of analysts to find events for cyber forensics analysis. A tabulated vector approach is proposed to create meaningful state vectors from time-oriented blocks. Multivariate and graphical analysis is then used to analyze state vectors in human–machine collaborative interface. Statistical tools, such as the Mahalanobis distance, factor analysis, and histogram matrices, are employed for outlier detection. This research also introduces the breakdown distance heuristic as a decomposition of the Mahalanobis distance, by indicating which variables contributed most to its value. This work further explores the application of the tabulated vector approach methodology on collected firewall logs. Lastly, the analytic methodologies employed are integrated into embedded analytic tools so that cyber analysts on the front-line can efficiently deploy the anomaly detection capabilities
Measuring the indirect effect: Voter initiatives and legislative production in the American states
Accepted ManuscriptRecent research has identified important policy differences between voter initiative states and pure representative states despite a lack of enough observable voter initiative campaigns to explain the policy differences. This paper investigates the indirect effects of the voter initiative process on legislative production by estimating the number of bill enacted in the American states. The results indicate that legislators in voter initiative states enact more legislation as the difficulty in qualifying a voter initiative for the ballot decreases, as the legislature is less able to alter the effects of successful voter initiatives, and as the average number of voter initiatives that appear on the ballot increases. These results provide some statistical evidence of the indirect effect of the voter initiative and are consistent with the theory that policy differences in voter initiative states are the result of the indirect effect of the voter initiative process.Randolph, G.M. (2010). Measuring the indirect effect: Voter initiatives and legislative production in the American states. Public Finance Review, 38(6), 762-786
Explaining Institutional Change: Why Elected Politicians Implement Direct Democracy
In existing models of direct democratic institutions, the median voter benefits, but representative politicians are harmed since their policy choices can be overridden. This is a puzzle, since representative politicians were instrumental in creating these institutions. I build a model of direct democracy that explains why a representative might benefit from tying his or her own hands in this way. The key features are (1) that voters are uncertain about their representative's preferences; (2) that direct and representative elections are complementary ways for voters to control outcomes. The model shows that some politicians benefit from the introduction of direct democracy, since they are more likely to survive representative elections: direct democracy credibly prevents politicians from realising extreme outcomes. Historical evidence from the introduction of the initiative, referendum and recall in America broadly supports the theory, which also explains two empirical results that have puzzled scholars: legislators are trusted less, but reelected more, in US states with direct democracy. I conclude by discussing the potential for incomplete information and signaling models to improve our understanding of institutional change more generally
A dyadic approach to understanding the impact of breast cancer on relationships between partners during early survivorship
© 2016 The Author(s). Background: The shared impact of breast cancer for women and their male partners is emerging as an important consideration during the experience of a breast cancer diagnosis, particularly during survivorship. This study aimed to explore the experiences of women and their partners during early survivorship and contributes a range of insights into the lives of those intimately affected by breast cancer. Methods: In-depth interviews were completed with Australian women survivors of breast cancer (n = 8) and their partners (n = 8), between six months and five years following cessation of treatment. Questions included a focus on the women and their partners' daily experiences during early survivorship, including the management of ongoing symptoms, engagement in leisure and social interests, returning to work, communicating with each other, maintenance of the current relationship and other important roles and responsibilities. Thematic analysis was employed to determine key themes arising from the dyadic accounts of women and their partners' experiences during early breast cancer survivorship. Results: Women and their partners experienced many changes to their previous roles, responsibilities and relationships during early breast cancer survivorship. Couples also reported a range of communication, intimacy and sexuality concerns which greatly impacted their interactions with each other, adding further demands on the relationship. Three significant themes were determined: (1) a disconnection within the relationship - this was expressed as the woman survivor of breast cancer needing to prioritise her own needs, sometimes at the expense of her partner and the relationship; (2) reformulating the relationship - this reflects the strategies used by couples to negotiate changes within the relationship; and (3) support is needed to negotiate the future of the relationship - couples emphasised the need for additional support and resources to assist them in maintaining their relationship during early survivorship. Conclusion: It can be concluded that the early survivorship period represents a crucial time for both women and their partners and there are currently limited options available to meet their shared needs and preferences for support. Findings indicate that a suitable model of care underpinned by a biopsychosocial framework, access to comprehensive assessment, timely support and the provision of targeted resources are urgently needed to assist women and their partners during this critical time
Recommended from our members
The diffusion of financial supervisory governance ideas
Who is watching the financial services industry? Since 1980, there have been multiple waves of thought about whether the ministry of finance, the central bank, a specialized regulator or some combination of these should have supervisory authority. These waves have been associated with the convergence of actual practices. How much and through what channels did internationally promoted ideas about supervisory 'best practice' influence institutional design choices? I use a new dataset of 83 countries and jurisdictions between the 1980s and 2007 to examine the diffusion of supervisory ideas. With this data, I employ Cox Proportional Hazard and Competing Risks Event History Analyses to evaluate the possible causal roles best practice policy ideas might have played. I find that banking crises and certain peer groups can encourage policy convergence on heavily promoted ideas
Processos de democracia direta: sim ou não? Os argumentos clássicos à luz da teoria e da prática
Regularmente surgem controvérsias sobre os processos de democracia direta, dos quais os mecanismos mais frequentes são a iniciativa popular, o plebiscito e o referendo. Por um lado, há autores que defendem a posição de que essas instituições tornam o jogo político mais lento, caro, confuso e ilegítimo; outros defendem a posição contrária e argumentam que processos de democracia direta são fundamentais para os cidadãos e a qualidade da democracia. O presente estudo analisa esse tema em torno de sete questões, baseadas em considerações teóricas e pesquisas empíricas: 1. A questão entre o minimalismo e o maximalismo democrático; 2. A concorrência entre maioria e minoria; 3. A concorrência entre as instituições representativas e os processos de democracia direta; 4. A questão da competência dos cidadãos; 5. A questão dos efeitos colaterais dos processos de democracia direta; 6. A questão do tamanho do eleitorado; 7. A questão dos custos dos processos de democracia direta. As sete questões são analisadas a partir de uma revisão bibliográfica que considera tanto fontes nacionais como internacionais. O estudo mostra que os processos de democracia direta podem ser um complemento para as instituições representativas em um sistema democrático. O bom desempenho dos plebiscitos, referendos e iniciativas populares depende tanto da regulamentação destes como também do desempenho das outras instituições políticas e da situação socioeconômica de um país. O estudo permite ampliar e aprofundar o debate sobre processos de democracia direta no Brasil
- …