A Behavior-Based Intrusion Detection System Using Ensemble Learning Techniques

Intrusion Detection Systems (IDSs) play a key role in modern ICT security. Attacks detected and reported by IDSs are often analyzed by administrators who are tasked with countering the attack and minimizing its damage. Consequently, it is important that the alerts generated by the IDS are as detailed as possible. In this paper, we present a multi-layered behavior-based IDS using ensemble learning techniques for the classification of network attacks. Three widely adopted and appreciated models, i.e., Decision Trees, Random Forests, and Artificial Neural Networks, have been chosen to build the ensemble. To reduce the system response time, our solution is designed to immediately filter out traffic detected as benign without further analysis, while suspicious events are investigated to achieve a more fine-grained classification. Experimental evaluation performed on the CIC-IDS2017 public dataset shows that the system is able to detect nine categories of attacks with high performances, according to all the considered metrics

Sequential Deliberation for Social Choice

In large scale collective decision making, social choice is a normative study of how one ought to design a protocol for reaching consensus. However, in instances where the underlying decision space is too large or complex for ordinal voting, standard voting methods of social choice may be impractical. How then can we design a mechanism - preferably decentralized, simple, scalable, and not requiring any special knowledge of the decision space - to reach consensus? We propose sequential deliberation as a natural solution to this problem. In this iterative method, successive pairs of agents bargain over the decision space using the previous decision as a disagreement alternative. We describe the general method and analyze the quality of its outcome when the space of preferences define a median graph. We show that sequential deliberation finds a 1.208- approximation to the optimal social cost on such graphs, coming very close to this value with only a small constant number of agents sampled from the population. We also show lower bounds on simpler classes of mechanisms to justify our design choices. We further show that sequential deliberation is ex-post Pareto efficient and has truthful reporting as an equilibrium of the induced extensive form game. We finally show that for general metric spaces, the second moment of of the distribution of social cost of the outcomes produced by sequential deliberation is also bounded

Atypical lymphoproliferation progressing into B-cell lymphoma in rheumatoid arthritis treated with different biological agents: clinical course and molecular characterization.

10noA patient with rheumatoid arthritis (RA) developed an atypical lymphoproliferative disorder (LPD) after methotrexate and cyclosporine A, which regressed after suspension of both drugs. After subsequent treatment with rituximab, the LPD was still undetectable. Anti-tumor necrosis factor a therapy was used when the arthritis relapsed, but an aggressive B-cell non Hodgkin's lymphoma developed. Molecular analyses showed an oligoclonal B-cell expansion at the LPD step. A minor clone with significant sequence homology to B-cell lymphomas arising in Sjogren's syndrome and mixed cryoglobulinemia syndrome, given rise to the non-Hodgkin's lymphoma. Treatment of rheumatoid arthritis associated with lymphoproliferation represents a clinical challenge, and common pathogenetic pathways to lymphoma may occur in different autoimmune diseases.openopenQuartuccio, Luca; De Re, V.; Fabris, M; Marzotto, A.; Franzolini, N; Gasparotto, D.; Caggiari, L.; Ferraccioli, G.; Scott, Cathryn Anne; DE VITA, SalvatoreQuartuccio, Luca; De Re, V.; Fabris, M; Marzotto, A.; Franzolini, N; Gasparotto, D.; Caggiari, L.; Ferraccioli, G.; Scott, Cathryn Anne; DE VITA, Salvator

Response of microchannel plates in ionization mode to single particles and electromagnetic showers

Hundreds of concurrent collisions per bunch crossing are expected at future hadron colliders. Precision timing calorimetry has been advocated as a way to mitigate the pileup effects and, thanks to their excellent time resolution, microchannel plates (MCPs) are good candidate detectors for this goal. We report on the response of MCPs, used as secondary emission detectors, to single relativistic particles and to electromagnetic showers. Several prototypes, with different geometries and characteristics, were exposed to particle beams at the INFN-LNF Beam Test Facility and at CERN. Their time resolution and efficiency are measured for single particles and as a function of the multiplicity of particles. Efficiencies between 50% and 90% to single relativistic particles are reached, and up to 100% in presence of a large number of particles. Time resolutions between 20ps and 30ps are obtained.Comment: 20 pages, 9 figures. Paper submitted to NIM

Chaos and Quantum Thermalization

We show that a bounded, isolated quantum system of many particles in a specific initial state will approach thermal equilibrium if the energy eigenfunctions which are superposed to form that state obey {\it Berry's conjecture}. Berry's conjecture is expected to hold only if the corresponding classical system is chaotic, and essentially states that the energy eigenfunctions behave as if they were gaussian random variables. We review the existing evidence, and show that previously neglected effects substantially strengthen the case for Berry's conjecture. We study a rarefied hard-sphere gas as an explicit example of a many-body system which is known to be classically chaotic, and show that an energy eigenstate which obeys Berry's conjecture predicts a Maxwell--Boltzmann, Bose--Einstein, or Fermi--Dirac distribution for the momentum of each constituent particle, depending on whether the wave functions are taken to be nonsymmetric, completely symmetric, or completely antisymmetric functions of the positions of the particles. We call this phenomenon {\it eigenstate thermalization}. We show that a generic initial state will approach thermal equilibrium at least as fast as $O(\hbar/\Delta)t^{-1}$, where $\Delta$ is the uncertainty in the total energy of the gas. This result holds for an individual initial state; in contrast to the classical theory, no averaging over an ensemble of initial states is needed. We argue that these results constitute a new foundation for quantum statistical mechanics.Comment: 28 pages in Plain TeX plus 2 uuencoded PS figures (included); minor corrections only, this version will be published in Phys. Rev. E; UCSB-TH-94-1

Moyal star product approach to the Bohr-Sommerfeld approximation

The Bohr-Sommerfeld approximation to the eigenvalues of a one-dimensional quantum Hamiltonian is derived through order $\hbar^2$ (i.e., including the first correction term beyond the usual result) by means of the Moyal star product. The Hamiltonian need only have a Weyl transform (or symbol) that is a power series in $\hbar$, starting with $\hbar^0$, with a generic fixed point in phase space. The Hamiltonian is not restricted to the kinetic-plus-potential form. The method involves transforming the Hamiltonian to a normal form, in which it becomes a function of the harmonic oscillator Hamiltonian. Diagrammatic and other techniques with potential applications to other normal form problems are presented for manipulating higher order terms in the Moyal series.Comment: 27 pages, no figure

Immune signatures in human PBMCs of idiotypic vaccine for HCV-related lymphoproliferative disorders

Hepatitis C virus (HCV) is one of the major risk factors for chronic hepatitis, which may progress to cirrhosis and hepatocellular carcinoma, as well as for type II mixed cryoglobulinemia (MC), which may further evolve into an overt B-cell non-Hodgkin's lymphoma (NHL)

Antibody Vh Repertoire Differences between Resolving and Chronically Evolving Hepatitis C Virus Infections

Despite the production of neutralizing antibodies to hepatitis C virus (HCV), many patients fail to clear the virus and instead develop chronic infection and long-term complications. To understand how HCV infection perturbs the antibody repertoire and to identify molecular features of antibody genes associated with either viral clearance or chronic infection, we sequenced the V(D)J region of naïve and memory B cells of 6 persons who spontaneously resolved an HCV infection (SR), 9 patients with a newly diagnosed chronically evolving infection (CE), and 7 healthy donors. In both naïve and memory B cells, the frequency of use of particular antibody gene subfamilies and segments varied among the three clinical groups, especially between SR and CE. Compared to CE, SR antibody genes used fewer VH, D and JH gene segments in naïve B cells and fewer VH segments in memory B cells. SR and CE groups significantly differed in the frequency of use of 7 gene segments in naïve B cell clones and 3 gene segments in memory clones. The nucleotide mutation rates were similar among groups, but the pattern of replacement and silent mutations in memory B cell clones indicated greater antigen selection in SR than CE. Greater clonal evolution of SR than CE memory B cells was revealed by analysis of phylogenetic trees and CDR3 lengths. Pauciclonality of the peripheral memory B cell population is a distinguishing feature of persons who spontaneously resolved an HCV infection. This finding, previously considered characteristic only of patients with HCV-associated lymphoproliferative disorders, suggests that the B cell clones potentially involved in clearance of the virus may also be those susceptible to abnormal expansion