Evaluating Machine Learning Classifiers for Hybrid Network Intrusion Detection Systems

Existing classifier evaluation methods do not fully capture the intended use of classifiers in hybrid intrusion detection systems (IDS), systems that employ machine learning alongside a signature-based IDS. This research challenges traditional classifier evaluation methods in favor of a value-focused evaluation method that incorporates evaluator-specific weights for classifier and prediction threshold selection. By allowing the evaluator to weight known and unknown threat detection by alert classification, classifier selection is optimized to evaluator values for this application. The proposed evaluation methods are applied to a Cyber Defense Exercise (CDX) dataset. Network data is processed to produce connection-level features, then labeled using packet-level alerts from a signature-based IDS. Seven machine learning algorithms are evaluated using traditional methods and the value-focused method. Comparing results demonstrates fallacies with traditional methods that do not consider evaluator values. Classifier selection fallacies are revealed in 2 of 5 notional weighting schemes and prediction threshold selection fallacies are revealed in 5 of 5 weighting schemes

K Giants in Baade's Window. II. The Abundance Distribution

This is the second in a series of papers in which we analyze spectra of over 400 K and M giants in Baade's Window, including most of the stars with proper motions measured by Spaenhauer et al. [AJ, 103, 297 (1992)]. In our first paper, we measured line--strength indices of Fe, Mg, CN and H$\beta$ and calibrated them on the system of Faber et al. [ApJS, 57, 711 (1985)]. Here, we use the $\langle{\rm Fe}\rangle$ index to derive an abundance distribution in [Fe/H] for 322 stars with effective temperatures between 3900 K and 5160 K. Our derived values of [Fe/H] agree well with those measured from high--resolution echelle spectra (e.g., McWilliam \& Rich [ApJS, 91, 749 (1994)]) for the small number of stars in common. We find a mean abundance $\langle{\rm [Fe/H]}\rangle = -0.11 \pm 0.04$ for our sample of Baade's Window K giants. More than half the sample lie in the range $-0.4 <$ \feh\ $<+0.3$. We estimate line--of--sight distances for individual stars in our sample and confirm that, in Baade's Window, most K giants with $V < 15.5$ are foreground disk stars, but the great majority (more than 80\%) with $V > 16$ belong to the bulge. We also compare the metallicities derived from the CN and Mg$_2$ indices to those from iron. Most of the metal--rich stars in our sample appear to be CN--weak, in contrast to the situation in metal--rich globular clusters and elliptical galaxies. The metal--poor half of our sample ([Fe/H] $< 0$) shows evidence for a mild Mg overenhancement ([Mg/Fe] $\sim +0.2$); but this is not seen in the more metal--rich stars ([Fe/H] $\geq$ 0). The K giants in Baade's Window therefore share some, but not all, of the characteristics of stars in elliptical galaxies as inferred from their integrated light.Comment: Accepted for publication in the Astronomical Journal, tentatively scheduled for July, 1996. LaTex source which generates 40 pages of text (no figures or tables). Complete (text + 15 figs + 5 tables) preprint in gzip/tar format is also available at ftp://bessel.mps.ohio-state.edu/pub/terndrup/kg2.tar.gz (227 kbyte

New High Proper Motion Stars from the Digitized Sky Survey. II. Northern Stars with 0.5<mu<2.0 arcsec/yr at High Galactic Latitudes

In a continuation of our systematic search for high proper motion stars in the Digitized Sky Survey, we have completed the analysis of northern sky fields at galactic latitudes above 25 degrees. With the help of our SUPERBLINK software, a powerful automated blink comparator developed by us, we have identified 1146 stars in the magnitude range 8<r<20 with proper motions 0.500<mu<2.000 arcsec/yr. These include 1080 stars previously listed in Luyten's proper motion catalogs (LHS, NLTT), 9 stars not previously listed in the Luyten catalogs but reported elsewhere in the literature (including 1 previously reported by our team), and 57 new objects reported here for the first time. This paper includes a list of positions, proper motions, magnitudes, and finder charts for all the new high proper motion stars. Combined with our previous study of low galactic latitude fields (see Paper I), our survey now covers over 98% of the northern sky. We conclude that the Luyten catalogs were 90% complete in the northern sky for stars with 0.5<mu<2.0 arcsec/yr down to magnitude r=19. We discuss the incompleteness of the old Luyten proper motion survey, and estimate completeness limits for our new survey.Comment: To appear in The Astronomical Journa

Measuring Relative Humidity in Agricultural Environments

Relative humidity is very important for many agricultural environments, such as fruit and vegetable storage facilities, greenhouses, and tobacco curing and handling facilities. Several scientific instruments measure temperature and relative humidity. The more accurate the instrument, the more it will cost. Devices that are economical for agricultural use in a barn, greenhouse, or a semi-protected environment often do not hold their accuracy over very long periods (six months to a year or longer) if they are used carelessly. Several instruments that are readily available and affordable for general farm use are described here. Often called hygrometers or hygro-thermometers, some are for visual indication only, while others also have recording capabilities. Calibrations or comparisons with known conditions can be done periodically to determine an instrument’s relative accuracy. Some calibration procedures are presented in this article

Cool White Dwarfs Revisited -- New Spectroscopy and Photometry

In this paper we present new and improved data on 38 cool white dwarfs identified by Oppenheimer et al. 2001 (OHDHS) as candidate dark halo objects. Using the high-res spectra obtained with LRIS, we measure radial velocities for 13 WDs that show an H alpha line. We show that the knowledge of RVs decreases the UV-plane velocities by only 6%. The radial velocity sample has a W-velocity dispersion of sig_W = 59 km/s--in between the values associated with the thick disk and the stellar halo. We also see indications for the presence of two populations by analyzing the velocities in the UV plane. In addition, we present CCD photometry for half of the sample, and with it recalibrate the photographic photometry of the remaining WDs. Using the new photometry in standard bands, and by applying the appropriate color-magnitude relations for H and He atmospheres, we obtain new distance estimates. New distances of the WDs that were not originally selected as halo candidates yield 13 new candidates. On average, new distances produce velocities in the UV plane that are larger by 10%, with already fast objects gaining more. Using the new data, while applying the same UV-velocity cut (94 km/s) as in OHDHS, we find a density of cool WDs of 1.7e-4 pc^-3, confirming the value of OHDHS. In addition, we derive the density as a function of the UV-velocity cutoff. The density (corrected for losses due to higher UV cuts) starts to flatten out at 150 km/s (0.4e-4 pc^-3), and is minimized (thus minimizing a possible non-halo contamination) at 190 km/s (0.3e-4 pc^-3). These densities are in a rough agreement with the estimates for the stellar halo WDs, corresponding to a factor of 1.9 and 1.4 higher values.Comment: Accepted to ApJ. New version contains some additional data. Results unchange

The Bulge Radial Velocity Assay (BRAVA): I. Techniques and a Rotation Curve

We are undertaking a large scale radial velocity survey of the Galactic bulge which uses M giant stars selected from the 2MASS catalog as targets for the CTIO 4m Hydra multi-object spectrograph. The aim of this survey is to test dynamical models of the bulge and to quantify the importance, if any, of cold stellar streams in the bulge and its vicinity. Here we report on the kinematics of a strip of fields at -10 < l <+10 degres and b=-4 degres. We construct a longitude-velocity plot for the bulge stars and the model data, and find that contrary to previous studies, the bulge does not rotate as a solid body. From -5<l<+5 degrees the rotation curve has a slope of roughly 100 km/s/kpc and flattens considerably at greater l and reaches a maximum rotation of 45 km/s. We compare our rotation curve and velocity dispersion profile to both the self-consistent model of Zhao (1996) and to N-body models; neither fits both our observed rotation curve and velocity dispersion profile. The high precision of our radial velocities (3 km/s) yields an unexpected result: hints of cold kinematic features are seen in a number of the line of sight velocity distributions.Comment: Accepted to ApJ letters. This replacement updates the paper to the accepted versio

Spectroscopy of New High Proper Motion Stars in the Northern Sky. I. New Nearby Stars, New High Velocity Stars, and an Enhanced Classification Scheme for M Dwarfs

We define an enhanced spectral classification scheme for M dwarf stars, and use it to derive spectral classification of 104 northern stars with proper motions larger than 0.5"/yr which we discovered in a survey of high proper motion stars at low galactic latitudes. The final tally is as follows: 54 M dwarfs, 25 sdK and sdM subdwarfs, 14 esdK and esdM extreme subdwarfs, and 11 DA and DC white dwarfs. Among the most interesting cases, we find one star to be the coolest subdwarf ever reported (LSR2036+5059, with spectral type sdM7.5), a new M9.0 dwarf only about 6pc distant (LSR1835+3259), and a new M6.5 dwarf only 7pc from the Sun (LSR2124+4003). Spectroscopic distances suggests that 27 of the M dwarfs, 3 of the white dwarfs, and one of the subdwarfs (LSR2036+5059) are within 25pc of the Sun, making them excellent candidates for inclusion in the solar neighborhood census. Estimated sky-projected velocities suggest that most of our subdwarfs and extreme subdwarfs have halo kinematics. We find that several white dwarfs and non metal-poor M dwarfs also have kinematics consistent with the halo, and we briefly discuss their possible origin.Comment: 53 pages, 18 figures, 5 tables, accepted by The Astronomical Journal; this updated version includes radial velocities for the stars and an expanded discussio