Selection of intrusion detection system threshold bounds for effective sensor fusion

The motivation behind the fusion of Intrusion Detection Systems was the realization that with the increasing traffic and increasing complexity of attacks, none of the present day stand-alone Intrusion Detection Systems can meet the high demand for a very high detection rate and an extremely low false positive rate. Multi-sensor fusion can be used to meet these requirements by a refinement of the combined response of different Intrusion Detection Systems. In this paper, we show the design technique of sensor fusion to best utilize the useful response from multiple sensors by an appropriate adjustment of the fusion threshold. The threshold is generally chosen according to the past experiences or by an expert system. In this paper, we show that the choice of the threshold bounds according to the Chebyshev inequality principle performs better. This approach also helps to solve the problem of scalability and has the advantage of failsafe capability. This paper theoretically models the fusion of Intrusion Detection Systems for the purpose of proving the improvement in performance, supplemented with the empirical evaluation. The combination of complementary sensors is shown to detect more attacks than the individual components. Since the individual sensors chosen detect sufficiently different attacks, their result can be merged for improved performance. The combination is done in different ways like (i) taking all the alarms from each system and avoiding duplications, (ii) taking alarms from each system by fixing threshold bounds, and (iii) rule-based fusion with a priori knowledge of the individual sensor performance. A number of evaluation metrics are used, and the results indicate that there is an overall enhancement in the performance of the combined detector using sensor fusion incorporating the threshold bounds and significantly better performance using simple rule-based fusion.

Search for a Fermiophobic Higgs Boson Decaying into Diphotons in p p-bar Collisions at sqrt{s} = 1.96 TeV

A search for a narrow diphoton mass resonance is presented based on data from 3.0 fb^{-1} of integrated luminosity from p-bar p collisions at sqrt{s} = 1.96 TeV collected by the CDF experiment. No evidence of a resonance in the diphoton mass spectrum is observed, and upper limits are set on the cross section times branching fraction of the resonant state as a function of Higgs boson mass. The resulting limits exclude Higgs bosons with masses below 106 GeV at a 95% Bayesian credibility level (C.L.) for one fermiophobic benchmark model.

Search for exclusive Z boson production and observation of high mass ppbar->gammagamma->p+ll+pbar events in ppbar collisions at sqrt(s) = 1.96 TeV

We present a search for exclusive Z boson production in proton-antiproton collisions at sqrt(s) = 1.96 TeV, using the CDF II detector at Fermilab. We observe no exclusive Z->ll candidates and place the first upper limit on the exclusive Z cross section in hadron collisions, sigma(exclu) gammagamma->p+ll+pbar, and measure the cross section for M(ll) > 40 GeV/c2 and |eta(l)|

Search for the Higgs boson produced in association with Z→ℓ+ℓ- using the matrix element method at CDF II

We present a search for associated production of the standard model (SM) Higgs boson and a $Z$ boson where the $Z$ boson decays to two leptons and the Higgs decays to a pair of $b$ quarks in $p\bar{p}$ collisions at the Fermilab Tevatron. We use event probabilities based on SM matrix elements to construct a likelihood function of the Higgs content of the data sample. In a CDF data sample corresponding to an integrated luminosity of 2.7 fb$^{-1}$ we see no evidence of a Higgs boson with a mass between 100 GeV$/c^2$ and 150 GeV$/c^2$. We set 95% confidence level (C.L.) upper limits on the cross-section for $ZH$ production as a function of the Higgs boson mass $m_H$; the limit is 8.2 times the SM prediction at $m_H = 115$ GeV$/c^2$.

Search for the associated production of the standard-model Higgs boson in the all-hadronic channel

"We report on a search for the standard-model Higgs boson in pp collisions at s=1.96 TeV using an integrated luminosity of 2.0 fb(-1). We look for production of the Higgs boson decaying to a pair of bottom quarks in association with a vector boson V (W or Z) decaying to quarks, resulting in a four-jet final state. Two of the jets are required to have secondary vertices consistent with B-hadron decays. We set the first 95% confidence level upper limit on the VH production cross section with V(-> qq/qq('))H(-> bb) decay for Higgs boson masses of 100-150 GeV/c(2) using data from run II at the Fermilab Tevatron. For m(H)=120 GeV/c(2), we exclude cross sections larger than 38 times the standard-model prediction."

Search for a Higgs Boson Decaying to Two W Bosons at CDF

We present a search for a Higgs boson decaying to two W bosons in ppbar collisions at sqrt(s)=1.96 TeV center-of-mass energy. The data sample corresponds to an integrated luminosity of 3.0 fb-1 collected with the CDF II detector. We find no evidence for production of a Higgs boson with mass between 110 and 200 GeV/c^2, and determine upper limits on the production cross section. For the mass of 160 GeV/c^2, where the analysis is most sensitive, the observed (expected) limit is 0.7 pb (0.9 pb) at 95% Bayesian credibility level which is 1.7 (2.2) times the standard model cross section.

Search for the Higgs Boson Produced in Association with Z→ℓ+ℓ- in pp̅ Collisions at √s=1.96 TeV

We present a search for the Higgs boson in the process $q\bar{q} \to ZH \to \ell^+\ell^- b\bar{b}$. The analysis uses an integrated luminosity of 1 fb$^{-1}$ of $p\bar{p}$ collisions produced at $\sqrt{s} =$ 1.96 TeV and accumulated by the upgraded Collider Detector at Fermilab (CDF II). We employ artificial neural networks both to correct jets mismeasured in the calorimeter, and to distinguish the signal kinematic distributions from those of the background. We see no evidence for Higgs boson production, and set 95% CL upper limits on $\sigma_{ZH} \cdot {\cal B}(H \to b\bar{b}$), ranging from 1.5 pb to 1.2 pb for a Higgs boson mass ($m_H$) of 110 to 150 GeV/$c^2$.

Combination of Tevatron Searches for the Standard Model Higgs Boson in the W+W- Decay Mode

We combine searches by the CDF and D0 collaborations for a Higgs boson decaying to W+W-. The data correspond to an integrated total luminosity of 4.8 (CDF) and 5.4 (D0) fb-1 of p-pbar collisions at sqrt{s}=1.96 TeV at the Fermilab Tevatron collider. No excess is observed above background expectation, and resulting limits on Higgs boson production exclude a standard-model Higgs boson in the mass range 162-166 GeV at the 95% C.L.

Combined Tevatron upper limit on gg->H->W+W- and constraints on the Higgs boson mass in fourth-generation fermion models

We combine results from searches by the CDF and D0 collaborations for a standard model Higgs boson (H) in the process gg->H->W+W- in p=pbar collisions at the Fermilab Tevatron Collider at sqrt{s}=1.96 TeV. With 4.8 fb-1 of integrated luminosity analyzed at CDF and 5.4 fb-1 at D0, the 95% Confidence Level upper limit on \sigma(gg->H) x B(H->W+W-) is 1.75 pb at m_H=120 GeV, 0.38 pb at m_H=165 GeV, and 0.83 pb at m_H=200 GeV. Assuming the presence of a fourth sequential generation of fermions with large masses, we exclude at the 95% Confidence Level a standard-model-like Higgs boson with a mass between 131 and 204 GeV.

Inclusive Search for Standard Model Higgs Boson Production in the WW Decay Channel using the CDF II Detector

We present a search for standard model (SM) Higgs boson production using ppbar collision data at sqrt(s) = 1.96 TeV, collected with the CDF II detector and corresponding to an integrated luminosity of 4.8 fb-1. We search for Higgs bosons produced in all processes with a significant production rate and decaying to two W bosons. We find no evidence for SM Higgs boson production and place upper limits at the 95% confidence level on the SM production cross section (sigma(H)) for values of the Higgs boson mass (m_H) in the range from 110 to 200 GeV. These limits are the most stringent for m_H > 130 GeV and are 1.29 above the predicted value of sigma(H) for mH = 165 GeV.

First Measurement of the b-Jet Cross Section in Events with a W Boson in pp̅ Collisions at √s=1.96 TeV

The cross section for jets from b quarks produced with a W boson has been measured in ppbar collision data from 1.9/fb of integrated luminosity recorded by the CDF II detector at the Tevatron. The W+b-jets process poses a significant background in measurements of top quark production and prominent searches for the Higgs boson. We measure a b-jet cross section of 2.74 +- 0.27(stat.) +- 0.42(syst.) pb in association with a single flavor of leptonic W boson decay over a limited kinematic phase space. This measured result cannot be accommodated in several available theoretical predictions.

Measurement of W-Boson Polarization in Top-Quark Decay in pp̅ Collisions at √s=1.96 TeV

We report measurements of the polarization of W bosons from top-quark decays using 2.7 fb^-1 of ppbar collisions collected by the CDF II detector. Assuming a top-quark mass of 175 GeV/c^2, three measurements are performed. A simultaneous measurement of the fraction of longitudinal (f_0) and right-handed (f_+) W bosons yields the model-independent results f_0 = 0.88 \pm 0.11 (stat) \pm 0.06 (syst) and f_+ = -0.15 \pm 0.07 (stat) \pm 0.06 (syst) with a correlation coefficient of -0.59. A measurement of f_0 (f_+) constraining f_+ (f_0) to its standard model value of 0.0 (0.7) yields f_0 = 0.70 \pm 0.07 (stat) \pm 0.04 (syst) (f_+ = -0.01 \pm 0.02 (stat) \pm 0.05 (syst)). All these results are consistent with standard model expectations.

Search for Technicolor Particles Produced in Association with a W Boson at CDF

We present a search for the technicolor particles $\rho_{T}$ and $\pi_{T}$ in the process $p\bar{p} \to \rho_{T} \to W\pi_{T}$ at a center of mass energy of $\sqrt{s}=1.96 \mathrm{TeV}$. The search uses a data sample corresponding to approximately $1.9 \mathrm{fb}^{-1}$ of integrated luminosity accumulated by the CDF II detector at the Fermilab Tevatron. The event signature we consider is $W\to \ell\nu$ and $\pi_{T} \to b\bar{b}, b\bar{c}$ or $b\bar{u}$ depending on the $\pi_{T}$ charge. We select events with a single high-$p_T$ electron or muon, large missing transverse energy, and two jets. Jets corresponding to bottom quarks are identified with multiple $b$-tagging algorithms. The observed number of events and the invariant mass distributions are consistent with the standard model background expectations, and we exclude a region at 95% confidence level in the $\rho_T$-$\pi_T$ mass plane. As a result, a large fraction of the region $m(\rho_T) = 180$ - $250 \mathrm{GeV}/c^2$ and $m(\pi_T) = 95$ - $145 \mathrm{GeV}/c^2$ is excluded.

Search for the associated production of the standard-model Higgs boson in the all-hadronic channel

"We report on a search for the standard-model Higgs boson in pp collisions at s=1.96 TeV using an integrated luminosity of 2.0 fb(-1). We look for production of the Higgs boson decaying to a pair of bottom quarks in association with a vector boson V (W or Z) decaying to quarks, resulting in a four-jet final state. Two of the jets are required to have secondary vertices consistent with B-hadron decays. We set the first 95% confidence level upper limit on the VH production cross section with V(-> qq/qq('))H(-> bb) decay for Higgs boson masses of 100-150 GeV/c(2) using data from run II at the Fermilab Tevatron. For m(H)=120 GeV/c(2), we exclude cross sections larger than 38 times the standard-model prediction."