Detecting stealthy attacks: Efficient monitoring of suspicious activities on computer networks

Stealthy attackers move patiently through computer networks - taking days, weeks or months to accomplish their objectives in order to avoid detection. As networks scale up in size and speed, monitoring for such attack attempts is increasingly a challenge. This paper presents an efficient monitoring technique for stealthy attacks. It investigates the feasibility of proposed method under number of different test cases and examines how design of the network affects the detection. A methodological way for tracing anonymous stealthy activities to their approximate sources is also presented. The Bayesian fusion along with traffic sampling is employed as a data reduction method. The proposed method has the ability to monitor stealthy activities using 10-20% size sampling rates without degrading the quality of detection.

Wireless networked control systems with QoS-based sampling

Closing feedback loops using an IEEE 802.11b ad hoc wireless communication network incurs many challenges sensitivity to varying channel conditions and lower physical transmission rates tend to limit the bandwidth of the communication channel. Given that the bandwidth usage and control performance are linked, a method of adapting the sampling interval based on an 'a priori', static sampling policy has been proposed and, more significantly, assuring stability in the mean square sense using discrete-time Markov jump linear system theory. Practical issues including current limitations of the 802.11 b protocol, the sampling policy and stability are highlighted. Simulation results on a cart-mounted inverted pendulum show that closed-loop stability can be improved using sample rate adaptation and that the control design criteria can be met in the presence of channel errors and severe channel contention.

Deep sampling and testing in soft stratified clay

A 37-m thick layer of stratified clay encountered during a site investigation at Swann's Bridge, near the sea-coast at Limavady, Northern Ireland, is one of the deepest and thickest layers of this type of material recorded in Ireland. A study of the relevant literature and stratigraphic evidence obtained from the site investigation showed that despite being close to the current shoreline, the clay was deposited in a fresh-water glacial lake formed approximately 13 000 BP. The 37-m layer of clay can be divided into two separate zones. The lower zone was deposited as a series of laminated layers of sand, silt, and clay, whereas the upper zone was deposited as a largely homogeneous mixture. A comprehensive series of tests was carried out on carefully selected samples from the full thickness of the deposit. The results obtained from these tests were complex and confusing, particularly the results of tests done on samples from the lower zone. The results of one-dimensional compression tests, unconsolidated undrained triaxial tests, and consolidated undrained triaxial compression tests showed that despite careful sampling, all of the specimens from the lower zone exhibited behaviour similar to that of reconstituted clays. It was immediately clear that the results needed explanation. This paper studies possible causes of the results from tests carried out on the lower Limavady clay. It suggests a possible mechanism based on anisotropic elasticity, yielding, and destructuring that provides an understanding of the observed behaviour.Key words: clay, laminations, disturbance, yielding, destructuring, reconstituted.