Data preprocessing for anomaly based network intrusion detection : a review

Data preprocessing is widely recognized as an important stage in anomaly detection. This paper reviews the data preprocessing techniques used by anomaly-based network intrusion detection systems (NIDS), concentrating on which aspects of the network traffic are analyzed, and what feature construction and selection methods have been used. Motivation for the paper comes from the large impact data preprocessing has on the accuracy and capability of anomaly-based NIDS. The review finds that many NIDS limit their view of network traffic to the TCP/IP packet headers. Time-based statistics can be derived from these headers to detect network scans, network worm behavior, and denial of service attacks. A number of other NIDS perform deeper inspection of request packets to detect attacks against network services and network applications. More recent approaches analyze full service responses to detect attacks targeting clients. The review covers a wide range of NIDS, highlighting which classes of attack are detectable by each of these approaches. Data preprocessing is found to predominantly rely on expert domain knowledge for identifying the most relevant parts of network traffic and for constructing the initial candidate set of traffic features. On the other hand, automated methods have been widely used for feature extraction to reduce data dimensionality, and feature selection to find the most relevant subset of features from this candidate set. The review shows a trend toward deeper packet inspection to construct more relevant features through targeted content parsing. These context sensitive features are required to detect current attacks.

Evaluating effects of eco-driving at traffic intersections based on traffic micro-simulation

Eco-driving is an initiative driving behavior which aims to reduce fuel consumption and emissions from automobiles. Recently, it has attracted increasing interests and has been adopted by many drivers in Australia. Although many of the studies have revealed considerable benefits in terms of fuel consumption and emissions after utilising eco-driving, most of the literature investigated eco-driving effects on individual driver but not traffic flow. The driving behavior of eco-drivers will potentially affect other drivers and thereby affects the entire traffic flow. To comprehensively assess and understand how effectively eco-driving can perform, therefore, measurement on traffic flow is necessary. In this paper, we proposed and demonstrated an evaluation method based on a microscopic traffic simulator (Aimsun). We focus on one particular eco-driving style which involves moderate and smooth acceleration. We evaluated both traffic performance (travel time) and environmental performance (fuel consumption and CO2 emission) at traffic intersection level in a simple simulation model. The before-and-after comparisons indicated potentially negative impacts when using eco-driving, which highlighted the necessity to carefully evaluate and improve eco-driving before wide promotion and implementation.

Look before you leap : a confidence-based method for selecting species criticality while avoiding negative populations in τ-leaping

The stochastic simulation algorithm was introduced by Gillespie and in a different form by Kurtz. There have been many attempts at accelerating the algorithm without deviating from the behavior of the simulated system. The crux of the explicit τ-leaping procedure is the use of Poisson random variables to approximate the number of occurrences of each type of reaction event during a carefully selected time period, τ. This method is acceptable providing the leap condition, that no propensity function changes “significantly” during any time-step, is met. Using this method there is a possibility that species numbers can, artificially, become negative. Several recent papers have demonstrated methods that avoid this situation. One such method classifies, as critical, those reactions in danger of sending species populations negative. At most, one of these critical reactions is allowed to occur in the next time-step. We argue that the criticality of a reactant species and its dependent reaction channels should be related to the probability of the species number becoming negative. This way only reactions that, if fired, produce a high probability of driving a reactant population negative are labeled critical. The number of firings of more reaction channels can be approximated using Poisson random variables thus speeding up the simulation while maintaining the accuracy. In implementing this revised method of criticality selection we make use of the probability distribution from which the random variable describing the change in species number is drawn. We give several numerical examples to demonstrate the effectiveness of our new method.

Constructing tag ontology from folksonomy based on WordNet

With the emergence of Web 2.0, Web users can classify Web items of their interest by using tags. Tags reflect users’ understanding to the items collected in each tag. Exploring user tagging behavior provides a promising way to understand users’ information needs. However, free and relatively uncontrolled vocabulary has its drawback in terms of lack of standardization and semantic ambiguity. Moreover, the relationships among tags have not been explored even there exist rich relationships among tags which could provide valuable information for us to better understand users. In this paper, we propose a novel approach to construct tag ontology based on the widely used general ontology WordNet to capture the semantics and the structural relationships of tags. Ambiguity of tags is a challenging problem to deal with in order to construct high quality tag ontology. We propose strategies to find the semantic meanings of tags and a strategy to disambiguate the semantics of tags based on the opinion of WordNet lexicographers. In order to evaluate the usefulness of the constructed tag ontology, in this paper we apply the extracted tag ontology in a tag recommendation experiment. We believe this is the first application of tag ontology for recommendation making. The initial result shows that by using the tag ontology to re-rank the recommended tags, the accuracy of the tag recommendation can be improved.

Human information behavior: Integrating diverse approaches and information use

For millennia humans have sought, organized, and used information as they learned and evolved patterns of human information behaviors to resolve their human problems and survive. However, despite the current focus on living in an "information age," we have a limited evolutionary understanding of human information behavior. In this article the authors examine the current three interdisciplinary approaches to conceptualizing how humans have sought information including (a) the everyday life information seeking-sense-making approach, (b) the information foraging approach, and (c) the problem-solution perspective on information seeking approach. In addition, due to the lack of clarity regarding the role of information use in information behavior, a fourth information approach is provided based on a theory of information use. The use theory proposed starts from an evolutionary psychology notion that humans are able to adapt to their environment and survive because of our modular cognitive architecture. Finally, the authors begin the process of conceptualizing these diverse approaches, and the various aspects or elements of these approaches, within an integrated model with consideration of information use. An initial integrated model of these different approaches with information use is proposed.

Arc voltage behavior in GMAW-P under different drop transfer modes

Purpose: Experimental measurements have been made to investigate meaning of the change in voltage for the pulse gas metal arc welding (GMAW-P) process operating under different drop transfer modes. Design/methodology/approach: Welding experiments with different values of pulsing parameter and simultaneous recording of high speed camera pictures and welding signals (such as current and voltage) were used to identify different drop transfer modes in GMAW-P. The investigation is based on the synchronization of welding signals and high speed camera to study the behaviour of voltage signal under different drop transfer modes. Findings: The results reveal that the welding arc is significantly affected by the molten droplet detachment. In fact, results indicate that sudden increase and drop in voltage just before and after the drop detachment can be used to characterize the voltage behaviour of different drop transfer mode in GMAW-P. Research limitations/implications: The results show that voltage signal carry rich information about different drop transfer occurring in GMAW-P. Hence it’s possible to detect different drop transfer modes. Future work should concentrate on development of filters for detection of different drop transfer modes. Originality/value: Determination of drop transfer mode with GMAW-P is crucial for the appropriate selection of pulse welding parameters. As change in drop transfer mode results in poor weld quality in GMAW-P, so in order to estimate the working parameters and ensure stable GMAW-P understanding the voltage behaviour of different drop transfer modes in GMAW-P will be useful. However, in case of GMAW-P hardly any attempt is made to analyse the behaviour of voltage signal for different drop transfer modes. This paper analyses the voltage signal behaviour of different drop transfer modes for GMAW-P.

Conformance checking of service behavior

A service-oriented system is composed of independent software units, namely services, that interact with one another exclusively through message exchanges. The proper functioning of such system depends on whether or not each individual service behaves as the other services expect it to behave. Since services may be developed and operated independently, it is unrealistic to assume that this is always the case. This article addresses the problem of checking and quantifying how much the actual behavior of a service, as recorded in message logs, conforms to the expected behavior as specified in a process model.We consider the case where the expected behavior is defined using the BPEL industry standard (Business Process Execution Language for Web Services). BPEL process definitions are translated into Petri nets and Petri net-based conformance checking techniques are applied to derive two complementary indicators of conformance: fitness and appropriateness. The approach has been implemented in a toolset for business process analysis and mining, namely ProM, and has been tested in an environment comprising multiple Oracle BPEL servers.

Updating and verification for multi-scale finite element model of structure behavior

The method on concurrent multi-scale model of structural behavior (CMSM-of-SB) for the purpose of structural health monitoring including model updating and validating has been studied. The detailed process of model updating and validating is discussed in terms of reduced scale specimen of the steel box girder in longitudinal stiffening truss of a long span bridge. Firstly, some influence factors affecting the accuracy of the CMSM-of-SB including the boundary restraint regidity, the geometry and material parameters on the toe of the weld and its neighbor are analyzed using sensitivity method. Then, sensitivity-based model updating technology is adopted to update the developed CMSM-of-SB and model verification is carried out through calculating and comparing stresses on different locations under various loading from dynamic characteristic and static response. It can be concluded that the CMSM-of-SB based on the substructure method is valid.

The thermal behavior of kaolinite intercalation complexes : a review

The kaolinite intercalation and its application in polymer-based functional composites have attracted great interest, both in industry and in academia fields, since they frequently exhibit remarkable improvements in materials properties compared with the virgin polymer or conventional micro and macro-composites. Also of significant interest regarding the kaolinite intercalation complex is its thermal behavior and decomposition. This is because heating treatment of intercalated kaolinite is necessary for its further application, especially in the field of plastic and rubber industry. Although intercalation of kaolinite is an old and ongoing research topic, there is a limited knowledge available on kaolinite intercalation with different reagents, the mechanism of intercalation complex formation as well as on thermal behavior and phase transition. This review attempts to summarize the most recent achievements in the thermal behavior study of kaolinite intercalation complexes obtained with the most common reagents including potassium acetate, formamide, dimethyl sulfoxide, hydrazine and urea. At the end of this paper, the further work on kaolinite intercalation complex was also proposed.

Developing safer passengers through a school-based injury prevention program

Motor vehicle crashes are a leading cause of death among young people. Fourteen percent of adolescents aged 13-14 report passenger-related injuries within three months. Intervention programs typically focus on young drivers and overlook passengers as potential protective influences. Graduated Driver Licensing restricts passenger numbers, and this study focuses on a complementary school-based intervention to increase passengers’ personal- and peer-protective behavior. The aim of this research was to assess the impact of the curriculum-based injury prevention program, Skills for Preventing Injury in Youth (SPIY), on passenger-related risk-taking and injuries, and intentions to intervene in friends’ risky road behavior. SPIY was implemented in Grade 8 Health classes and evaluated using survey and focus group data from 843 students across 10 Australian secondary schools. Intervention students reported less passenger-related risk-taking six months following the program. Their intention to protect friends from underage driving also increased. The results of this study show that a comprehensive, school-based program targeting individual and social changes can increase adolescent passenger safety.

The influence of motorcyclist behavior in crash involvement

Introduction: In Singapore, motorcycle crashes account for 50% of traffic fatalities and 53% of injuries. While extensive research efforts have been devoted to improve the motorcycle safety, the relationship between the rider behavior and the crash risk is still not well understood. The objective of this study is to evaluate how behavioral factors influence crash risk and to identify the most vulnerable group of motorcyclists. Methods: To explore the rider behavior, a 61-item questionnaire examining sensation seeking (Zuckerman et al., 1978), impulsiveness (Eysenck et al., 1985), aggressiveness (Buss & Perry, 1992), and risk-taking behavior (Weber et al., 2002) was developed. A total of 240 respondents with at least one year riding experience form the sample that relate behavior to their crash history, traffic penalty awareness, and demographic characteristics. By clustering the crash risk using the medoid portioning algorithm, the log-linear model relating the rider behavior to crash risk was developed. Results and Discussions: Crash-involved motorcyclists scored higher in impulsive sensation seeking, aggression and risk-taking behavior. Aggressive and high risk-taking motorcyclists were respectively 1.30 and 2.21 times more likely to fall under the high crash involvement group while impulsive sensation seeking was not found to be significant. Based on the scores on risk-taking and aggression, the motorcyclists were clustered into four distinct personality combinations namely, extrovert (aggressive, impulsive risk-takers), leader (cautious, aggressive risk-takers), follower (agreeable, ignorant risk-takers), and introvert (self-consciousness, fainthearted risk-takers). “Extrovert” motorcyclists were most prone to crashes, being 3.34 times more likely to involve in crash and 8.29 times more vulnerable than the “introvert”. Mediating factors like demographic characteristics, riding experience, and traffic penalty awareness were found not to be significant in reducing crash risk. Conclusion: The findings of this study will be useful for road safety campaign planners to be more focused in the target group as well as those who employ motorcyclists for their delivery business.

Challenges in mass spectrometry-based quantification of bioactive peptides: A case study exploring the neuropeptide Y family

The study of biologically active peptides is critical to the understanding of physiological pathways, especially those involved in the development of disease. Historically, the measurement of biologically active endogenous peptides has been undertaken by radioimmunoassay, a highly sensitive and robust technique that permits the detection of physiological concentrations in different biofluid and tissue extracts. Over recent years, a range of mass spectrometric approaches have been applied to peptide quantification with limited degrees of success. Neuropeptide Y (NPY), peptide YY (PYY), and pancreatic polypeptide (PP) belong to the NPY family exhibiting regulatory effects on appetite and feeding behavior. The physiological significance of these peptides depends on their molecular forms and in vivo concentrations systemically and at local sites within tissues. In this report, we describe an approach for quantification of individual peptides within mixtures using high-performance liquid chromatography electrospray ionization tandem mass spectrometry analysis of the NPY family peptides. Aspects of quantification including sample preparation, the use of matrix-matched calibration curves, and internal standards will be discussed. This method for the simultaneous determination of NPY, PYY, and PP was accurate and reproducible but lacks the sensitivity required for measurement of their endogenous concentration in plasma. The advantages of mass spectrometric quantification will be discussed alongside the current obstacles and challenges. © 2012 Wiley Periodicals, Inc. Biopolymers (Pept Sci) 98: 357–366, 2012.

Travel behavior of workers in Dhaka and their attitude towards road pricing

Dhaka, the capital of Bangladesh, is facing severe traffic congestion. Owing to the flaws in past land use and transport planning decisions, uncontrolled population growth and urbanization, Dhaka’s traffic condition is worsening. Road space is widely regarded in the literature as a utility, so a common view of transport economists is that its usage ought to be charged. Road pricing policy has proven to be effective in managing travel demand, in order to reduce traffic congestion from road networks in a number of cities including London, Stockholm and Singapore. Road pricing as an economic mechanism to manage travel demand can be more effective and user-friendly when revenue is hypothecated into supply alternatives such as improvements to the transit system. This research investigates the feasibility of adopting road pricing in Dhaka with respect to a significant Bus Rapid Transit (BRT) project. Because both are very new concepts for the population of Dhaka, public acceptability would be a principal issue driving their success or failure. This paper explores the travel behaviour of workers in Dhaka and public perception toward Road Pricing with regards to work trips- based on worker’s travel behaviour. A revealed preference and stated preference survey has been conducted on sample of workers in Dhaka. They were asked limited demographic questions, their current travel behaviour and at the end they had been given several hypothetical choices of integrated BRT and road pricing to choose from. Key finding from the survey is the objective of integrated road pricing; subsidies Bus rapid Transit by road pricing to get reduced BRT fare; cannot be achieved in Dhaka. This is because most of the respondent stated that they would choose the cheapest option Walk-BRT-Walk, even though this would be more time consuming and uncomfortable as they have to walk from home to BRT station and also from BRT station to home. Proper economic analysis has to be carried out to find out the appropriate fare of BRT and road charge with some incentive for the low income people.

Towards an integration of the theory of planned behaviour and cognitive behavioural strategies : an example from a school-based injury prevention programme

Adolescent risk-taking behavior has potentially serious injury consequences and school-based behavior change programs provide potential for reducing such harm. A well-designed program is likely to be theory-based and ecologically valid however it is rare that the operationalisation process of theories is described. The aim of this paper is to outline how the Theory of Planned Behavior and Cognitive Behavioral Therapy informed intervention design in a school setting. Teacher interviews provided insights into strategies that might be implemented within the curriculum and provided detail used to operationalise theory constructs. Benefits and challenges in applying both theories are described with examples from an injury prevention program, Skills for Preventing Injury in Youth.