Modeling User Search Behavior for Masquerade Detection

Masquerade attacks are a common security problem that is a consequence of identity theft. This paper extends prior work by modeling user search behavior to detect deviations indicating a masquerade attack. We hypothesize that each individual user knows their own file system well enough to search in a limited, targeted and unique fashion in order to find information germane to their current task. Masqueraders, on the other hand, will likely not know the file system and layout of another user's desktop, and would likely search more extensively and broadly in a manner that is different than the victim user being impersonated. We identify actions linked to search and information access activities, and use them to build user models. The experimental results show that modeling search behavior reliably detects all masqueraders with a very low false positive rate of 1.1%, far better than prior published results. The limited set of features used for search behavior modeling also results in large performance gains over the same modeling techniques that use larger sets of features

Photonic realization of the relativistic Kronig-Penney model and relativistic Tamm surface states

Photonic analogues of the relativistic Kronig-Penney model and of relativistic surface Tamm states are proposed for light propagation in fibre Bragg gratings (FBGs) with phase defects. A periodic sequence of phase slips in the FBG realizes the relativistic Kronig-Penney model, the band structure of which being mapped into the spectral response of the FBG. For the semi-infinite FBG Tamm surface states can appear and can be visualized as narrow resonance peaks in the transmission spectrum of the grating

Numerical convergence of the block-maxima approach to the Generalized Extreme Value distribution

In this paper we perform an analytical and numerical study of Extreme Value distributions in discrete dynamical systems. In this setting, recent works have shown how to get a statistics of extremes in agreement with the classical Extreme Value Theory. We pursue these investigations by giving analytical expressions of Extreme Value distribution parameters for maps that have an absolutely continuous invariant measure. We compare these analytical results with numerical experiments in which we study the convergence to limiting distributions using the so called block-maxima approach, pointing out in which cases we obtain robust estimation of parameters. In regular maps for which mixing properties do not hold, we show that the fitting procedure to the classical Extreme Value Distribution fails, as expected. However, we obtain an empirical distribution that can be explained starting from a different observable function for which Nicolis et al. [2006] have found analytical results.Comment: 34 pages, 7 figures; Journal of Statistical Physics 201

Determination of the Strong Coupling \boldmath{\as} from hadronic Event Shapes and NNLO QCD predictions using JADE Data

Event Shape Data from $e^+e^-$ annihilation into hadrons collected by the JADE experiment at centre-of-mass energies between 14 GeV and 44 GeV are used to determine the strong coupling $\alpha_S$. QCD predictions complete to next-to-next-to-leading order (NNLO), alternatively combined with resummed next-to-leading-log-approximation (NNLO+NLLA) calculations, are used. The combined value from six different event shape observables at the six JADE centre-of-mass energies using the NNLO calculations is $\alpha_S(M_Z)$= 0.1210 +/- 0.0007(stat.) +/- 0.0021(expt.) +/- 0.0044(had.) +/- 0.0036(theo.) and with the NNLO+NLLA calculations the combined value is $\alpha_S$= 0.1172 +/- 0.0006(stat.) +/- 0.0020(expt.) +/- 0.0035(had.) +/- 0.0030(theo.) . The stability of the NNLO and NNLO+NLLA results with respect to missing higher order contributions, studied by variations of the renormalisation scale, is improved compared to previous results obtained with NLO+NLLA or with NLO predictions only. The observed energy dependence of $\alpha_S$ agrees with the QCD prediction of asymptotic freedom and excludes absence of running with 99% confidence level.Comment: 9 pages, EPHJA style, 4 figures, corresponds to published version with JADE author lis

Hadronization effects in event shape moments

We study the moments of hadronic event shapes in $e^+e^-$ annihilation within the context of next-to-next-to-leading order (NNLO) perturbative QCD predictions combined with non-perturbative power corrections in the dispersive model. This model is extended to match upon the NNLO perturbative prediction. The resulting theoretical expression has been compared to experimental data from JADE and OPAL, and a new value for $\alpha_s(M_Z)$ has been determined, as well as of the average coupling $\alpha_0$ in the non-perturbative region below $\mu_I=2$ GeV within the dispersive model: \alpha_s(M_Z)&=0.1153\pm0.0017(\mathrm{exp})\pm0.0023(\mathrm{th}),\alpha_0&=0.5132\pm0.0115(\mathrm{exp})\pm0.0381(\mathrm{th}), The precision of the $\alpha_s(M_Z)$ value has been improved in comparison to the previously available next-to-leading order analysis. We observe that the resulting power corrections are considerably larger than those estimated from hadronization models in multi-purpose event generator programs.Comment: 23 pages, 5 figures, 15 tables. Few minor changes. Version accepted for publication in European Physical Journal C

Measurement of the polarisation of W bosons produced with large transverse momentum in pp collisions at sqrt(s) = 7 TeV with the ATLAS experiment

This paper describes an analysis of the angular distribution of W->enu and W->munu decays, using data from pp collisions at sqrt(s) = 7 TeV recorded with the ATLAS detector at the LHC in 2010, corresponding to an integrated luminosity of about 35 pb^-1. Using the decay lepton transverse momentum and the missing transverse energy, the W decay angular distribution projected onto the transverse plane is obtained and analysed in terms of helicity fractions f0, fL and fR over two ranges of W transverse momentum (ptw): 35 < ptw < 50 GeV and ptw > 50 GeV. Good agreement is found with theoretical predictions. For ptw > 50 GeV, the values of f0 and fL-fR, averaged over charge and lepton flavour, are measured to be : f0 = 0.127 +/- 0.030 +/- 0.108 and fL-fR = 0.252 +/- 0.017 +/- 0.030, where the first uncertainties are statistical, and the second include all systematic effects.Comment: 19 pages plus author list (34 pages total), 9 figures, 11 tables, revised author list, matches European Journal of Physics C versio

Observation of a new chi_b state in radiative transitions to Upsilon(1S) and Upsilon(2S) at ATLAS

The chi_b(nP) quarkonium states are produced in proton-proton collisions at the Large Hadron Collider (LHC) at sqrt(s) = 7 TeV and recorded by the ATLAS detector. Using a data sample corresponding to an integrated luminosity of 4.4 fb^-1, these states are reconstructed through their radiative decays to Upsilon(1S,2S) with Upsilon->mu+mu-. In addition to the mass peaks corresponding to the decay modes chi_b(1P,2P)->Upsilon(1S)gamma, a new structure centered at a mass of 10.530+/-0.005 (stat.)+/-0.009 (syst.) GeV is also observed, in both the Upsilon(1S)gamma and Upsilon(2S)gamma decay modes. This is interpreted as the chi_b(3P) system.Comment: 5 pages plus author list (18 pages total), 2 figures, 1 table, corrected author list, matches final version in Physical Review Letter

Search for displaced vertices arising from decays of new heavy particles in 7 TeV pp collisions at ATLAS

We present the results of a search for new, heavy particles that decay at a significant distance from their production point into a final state containing charged hadrons in association with a high-momentum muon. The search is conducted in a pp-collision data sample with a center-of-mass energy of 7 TeV and an integrated luminosity of 33 pb^-1 collected in 2010 by the ATLAS detector operating at the Large Hadron Collider. Production of such particles is expected in various scenarios of physics beyond the standard model. We observe no signal and place limits on the production cross-section of supersymmetric particles in an R-parity-violating scenario as a function of the neutralino lifetime. Limits are presented for different squark and neutralino masses, enabling extension of the limits to a variety of other models.Comment: 8 pages plus author list (20 pages total), 8 figures, 1 table, final version to appear in Physics Letters

Measurement of the inclusive isolated prompt photon cross-section in pp collisions at sqrt(s)= 7 TeV using 35 pb-1 of ATLAS data

A measurement of the differential cross-section for the inclusive production of isolated prompt photons in pp collisions at a center-of-mass energy sqrt(s) = 7 TeV is presented. The measurement covers the pseudorapidity ranges |eta|<1.37 and 1.52<=|eta|<2.37 in the transverse energy range 45<=E_T<400GeV. The results are based on an integrated luminosity of 35 pb-1, collected with the ATLAS detector at the LHC. The yields of the signal photons are measured using a data-driven technique, based on the observed distribution of the hadronic energy in a narrow cone around the photon candidate and the photon selection criteria. The results are compared with next-to-leading order perturbative QCD calculations and found to be in good agreement over four orders of magnitude in cross-section.Comment: 7 pages plus author list (18 pages total), 2 figures, 4 tables, final version published in Physics Letters

Measurement of the production cross section of prompt j/psi mesons in association with a W (+/-) boson in pp collisions root s=7 TeV with the ATLAS detector

The process pp → W±J/ψ provides a powerful probe of the production mechanism of charmonium in hadronic collisions, and is also sensitive to multiple parton interactions in the colliding protons. Using the 2011 ATLAS dataset of 4.5 fb-1 of p s = 7TeV pp collisions at the LHC, the first observation is made of the production of W± + prompt J/ events in hadronic collisions, using W± → μ and J/ψ → μ+μ-. A yield of 27.4±7.5 -6.5 W± + prompt J/ψ events is observed, with a statistical significance of 5.1. The production rate as a ratio to the inclusive W± boson production rate is measured, and the double parton scattering contribution to the cross section is estimated. Copyright CERN, for the benefit of the ATLAS Collaboration