AI Solutions for MDS: Artificial Intelligence Techniques for Misuse Detection and Localisation in Telecommunication Environments

This report considers the application of Articial Intelligence (AI) techniques to the problem of misuse detection and misuse localisation within telecommunications environments. A broad survey of techniques is provided, that covers inter alia rule based systems, model-based systems, case based reasoning, pattern matching, clustering and feature extraction, articial neural networks, genetic algorithms, arti cial immune systems, agent based systems, data mining and a variety of hybrid approaches. The report then considers the central issue of event correlation, that is at the heart of many misuse detection and localisation systems. The notion of being able to infer misuse by the correlation of individual temporally distributed events within a multiple data stream environment is explored, and a range of techniques, covering model based approaches, `programmed' AI and machine learning paradigms. It is found that, in general, correlation is best achieved via rule based approaches, but that these suffer from a number of drawbacks, such as the difculty of developing and maintaining an appropriate knowledge base, and the lack of ability to generalise from known misuses to new unseen misuses. Two distinct approaches are evident. One attempts to encode knowledge of known misuses, typically within rules, and use this to screen events. This approach cannot generally detect misuses for which it has not been programmed, i.e. it is prone to issuing false negatives. The other attempts to `learn' the features of event patterns that constitute normal behaviour, and, by observing patterns that do not match expected behaviour, detect when a misuse has occurred. This approach is prone to issuing false positives, i.e. inferring misuse from innocent patterns of behaviour that the system was not trained to recognise. Contemporary approaches are seen to favour hybridisation, often combining detection or localisation mechanisms for both abnormal and normal behaviour, the former to capture known cases of misuse, the latter to capture unknown cases. In some systems, these mechanisms even work together to update each other to increase detection rates and lower false positive rates. It is concluded that hybridisation offers the most promising future direction, but that a rule or state based component is likely to remain, being the most natural approach to the correlation of complex events. The challenge, then, is to mitigate the weaknesses of canonical programmed systems such that learning, generalisation and adaptation are more readily facilitated

Beam Test of Silicon Strip Sensors for the ZEUS Micro Vertex Detector

For the HERA upgrade, the ZEUS experiment has designed and installed a high precision Micro Vertex Detector (MVD) using single sided micro-strip sensors with capacitive charge division. The sensors have a readout pitch of 120 microns, with five intermediate strips (20 micron strip pitch). An extensive test program has been carried out at the DESY-II testbeam facility. In this paper we describe the setup developed to test the ZEUS MVD sensors and the results obtained on both irradiated and non-irradiated single sided micro-strip detectors with rectangular and trapezoidal geometries. The performances of the sensors coupled to the readout electronics (HELIX chip, version 2.2) have been studied in detail, achieving a good description by a Monte Carlo simulation. Measurements of the position resolution as a function of the angle of incidence are presented, focusing in particular on the comparison between standard and newly developed reconstruction algorithms.Comment: 41 pages, 21 figures, 2 tables, accepted for publication in NIM

Understanding constraint expressions in large conceptual schemas by automatic filtering

Human understanding of constraint expressions (also called schema rules) in large conceptual schemas is very di cult. This is due to the fact that the elements (entity types, attributes, relationship types) involved in an expression are de ned in di fferent places in the schema, which may be very distant from each other and embedded in an intricate web of irrelevant elements. The problem is insignifi cant when the conceptual schema is small, but very signi cant when it is large. In this paper we describe a novel method that, given a set of constraint expressions and a large conceptual schema, automatically filters the conceptual schema, obtaining a smaller one that contains the elements of interest for the understanding of the expressions. We also show the application of the method to the important case of understanding the specication of event types, whose constraint expressions consists of a set of pre and postconditions. We have evaluated the method by means of its application to a set of large conceptual schemas. The results show that the method is eff ective and e cient. We deal with conceptual schemas in UML/OCL, but the method can be adapted to other languages.Peer ReviewedPreprin

Planning the Future of U.S. Particle Physics (Snowmass 2013): Chapter 1: Summary

These reports present the results of the 2013 Community Summer Study of the APS Division of Particles and Fields ("Snowmass 2013") on the future program of particle physics in the U.S. Chapter 1 contains the Executive Summary and the summaries of the reports of the nine working groups.Comment: 51 page

Measurement of inclusive D*+- and associated dijet cross sections in photoproduction at HERA

Inclusive photoproduction of D*+- mesons has been measured for photon-proton centre-of-mass energies in the range 130 < W < 280 GeV and a photon virtuality Q^2 < 1 GeV^2. The data sample used corresponds to an integrated luminosity of 37 pb^-1. Total and differential cross sections as functions of the D* transverse momentum and pseudorapidity are presented in restricted kinematical regions and the data are compared with next-to-leading order (NLO) perturbative QCD calculations using the "massive charm" and "massless charm" schemes. The measured cross sections are generally above the NLO calculations, in particular in the forward (proton) direction. The large data sample also allows the study of dijet production associated with charm. A significant resolved as well as a direct photon component contribute to the cross section. Leading order QCD Monte Carlo calculations indicate that the resolved contribution arises from a significant charm component in the photon. A massive charm NLO parton level calculation yields lower cross sections compared to the measured results in a kinematic region where the resolved photon contribution is significant.Comment: 32 pages including 6 figure

Measurement of event shapes in deep inelastic scattering at HERA

Inclusive event-shape variables have been measured in the current region of the Breit frame for neutral current deep inelastic ep scattering using an integrated luminosity of 45.0 pb^-1 collected with the ZEUS detector at HERA. The variables studied included thrust, jet broadening and invariant jet mass. The kinematic range covered was 10 < Q^2 < 20,480 GeV^2 and 6.10^-4 < x < 0.6, where Q^2 is the virtuality of the exchanged boson and x is the Bjorken variable. The Q dependence of the shape variables has been used in conjunction with NLO perturbative calculations and the Dokshitzer-Webber non-perturbative corrections (`power corrections') to investigate the validity of this approach.Comment: 7+25 pages, 6 figure

Measurement of the diffractive structure function in deep inelastic scattering at HERA

This paper presents an analysis of the inclusive properties of diffractive deep inelastic scattering events produced in $ep$ interactions at HERA. The events are characterised by a rapidity gap between the outgoing proton system and the remaining hadronic system. Inclusive distributions are presented and compared with Monte Carlo models for diffractive processes. The data are consistent with models where the pomeron structure function has a hard and a soft contribution. The diffractive structure function is measured as a function of \xpom, the momentum fraction lost by the proton, of $\beta$, the momentum fraction of the struck quark with respect to \xpom, and of $Q^2$. The \xpom dependence is consistent with the form \xpoma where $a~=~1.30~\pm~0.08~(stat)~^{+~0.08}_{-~0.14}~(sys)$ in all bins of $\beta$ and $Q^2$. In the measured $Q^2$ range, the diffractive structure function approximately scales with $Q^2$ at fixed $\beta$. In an Ingelman-Schlein type model, where commonly used pomeron flux factor normalisations are assumed, it is found that the quarks within the pomeron do not saturate the momentum sum rule.Comment: 36 pages, latex, 11 figures appended as uuencoded fil

Measurement of Jet Shapes in Photoproduction at HERA

The shape of jets produced in quasi-real photon-proton collisions at centre-of-mass energies in the range $134-277$ GeV has been measured using the hadronic energy flow. The measurement was done with the ZEUS detector at HERA. Jets are identified using a cone algorithm in the $\eta - \phi$ plane with a cone radius of one unit. Measured jet shapes both in inclusive jet and dijet production with transverse energies $E^{jet}_T>14$ GeV are presented. The jet shape broadens as the jet pseudorapidity ($\eta^{jet}$) increases and narrows as $E^{jet}_T$ increases. In dijet photoproduction, the jet shapes have been measured separately for samples dominated by resolved and by direct processes. Leading-logarithm parton-shower Monte Carlo calculations of resolved and direct processes describe well the measured jet shapes except for the inclusive production of jets with high $\eta^{jet}$ and low $E^{jet}_T$. The observed broadening of the jet shape as $\eta^{jet}$ increases is consistent with the predicted increase in the fraction of final state gluon jets.Comment: 29 pages including 9 figure

Search for the standard model Higgs boson in the H to ZZ to 2l 2nu channel in pp collisions at sqrt(s) = 7 TeV

A search for the standard model Higgs boson in the H to ZZ to 2l 2nu decay channel, where l = e or mu, in pp collisions at a center-of-mass energy of 7 TeV is presented. The data were collected at the LHC, with the CMS detector, and correspond to an integrated luminosity of 4.6 inverse femtobarns. No significant excess is observed above the background expectation, and upper limits are set on the Higgs boson production cross section. The presence of the standard model Higgs boson with a mass in the 270-440 GeV range is excluded at 95% confidence level.Comment: Submitted to JHE

Measurement of the open-charm contribution to the diffractive proton structure function

Production of D*+/-(2010) mesons in diffractive deep inelastic scattering has been measured with the ZEUS detector at HERA using an integrated luminosity of 82 pb^{-1}. Diffractive events were identified by the presence of a large rapidity gap in the final state. Differential cross sections have been measured in the kinematic region 1.5 < Q^2 < 200 GeV^2, 0.02 < y < 0.7, x_{IP} < 0.035, beta 1.5 GeV and |\eta(D*+/-)| < 1.5. The measured cross sections are compared to theoretical predictions. The results are presented in terms of the open-charm contribution to the diffractive proton structure function. The data demonstrate a strong sensitivity to the diffractive parton densities.Comment: 35 pages, 11 figures, 6 table