Measuring Inconsistency in a Network Intrusion Detection Rule Set Based on Snort

In this preliminary study, we investigate how inconsistency in a network intrusion detection rule set can be measured. To achieve this, we first examine the structure of these rules which are based on Snort and incorporate regular expression (Regex) pattern matching. We then identify primitive elements in these rules in order to translate the rules into their (equivalent) logical forms and to establish connections between them. Additional rules from background knowledge are also introduced to make the correlations among rules more explicit. We measure the degree of inconsistency in formulae of such a rule set (using the Scoring function, Shapley inconsistency values and Blame measure for prioritized knowledge) and compare the informativeness of these measures. Finally, we propose a new measure of inconsistency for prioritized knowledge which incorporates the normalized number of atoms in a language involved in inconsistency to provide a deeper inspection of inconsistent formulae. We conclude that such measures are useful for the network intrusion domain assuming that introducing expert knowledge for correlation of rules is feasible.

Bridging Jeffrey's Rule, AGM Revision and Dempster Conditioning in the Theory of Evidence

Belief revision characterizes the process of revising an agent’s beliefs when receiving new evidence. In the field of artificial intelligence, revision strategies have been extensively studied in the context of logic-based formalisms and probability kinematics. However, so far there is not much literature on this topic in evidence theory. In contrast, combination rules proposed so far in the theory of evidence, especially Dempster rule, are symmetric. They rely on a basic assumption, that is, pieces of evidence being combined are considered to be on a par, i.e. play the same role. When one source of evidence is less reliable than another, it is possible to discount it and then a symmetric combination operation
is still used. In the case of revision, the idea is to let prior knowledge of an agent be altered by some input information. The change problem is thus intrinsically asymmetric. Assuming the input information is reliable, it should be retained whilst the prior information should be changed minimally to that effect. To deal with this issue, this paper defines the notion of revision for the theory of evidence in such a way as to bring together probabilistic and logical views. Several revision rules previously proposed are reviewed and we advocate one of them as better corresponding to the idea of revision. It is extended to cope with inconsistency between prior and input information. It reduces to Dempster
rule of combination, just like revision in the sense of Alchourron, Gardenfors, and Makinson (AGM) reduces to expansion, when the input is strongly consistent with the prior belief function. Properties of this revision rule are also investigated and it is shown to generalize Jeffrey’s rule of updating, Dempster rule of conditioning and a form of AGM revision.

Working with the 'System' and 'Lifeworld': Using Action Research to Enhance Resilience and Attachment in a Children's Home

Residential child care workers in the UK are caught betwen competing imperatives on a grand scale. On the one hand, they are required to implement an increasing raft of policy. On the other, they must proactively engage with the young people under their care.

The Architecture of Home in Cairo: Socio-Spatial Practice of the Hawari's Everyday Life

The hawari of Cairo - narrow non-straight alleyways - are the basic urban units that have formed the medieval city since its foundation back in 969 AD. Until early in the C20th, they made up the primary urban divisions of the city and were residential in nature. Contemporary hawari, by contrast, are increasingly dominated by commercial and industrial activity. This medieval urban maze of extremely short, broken, zigzag streets and dead ends are defensible territories, powerful institutions, and important social systems. While the hawari have been studied as an exemplar for urban structure of medieval Islamic urbanism, and as individual building typologies, this book is the first to examine in detail the socio-spatial practice of the architecture of home in the city. It investigates how people live, communicate and relate to each other within their houses or shared spaces of the alleys, and in doing so, to uncover several new socio-spatial dimensions and meanings in this architectural form.

In an attempt to re-establish the link between architecture past and present, and to understand the changing social needs of communities, this book uncovers the notion of home as central to understand architecture in such a city with long history as Cairo. It firstly describes the historical development of the domestic spaces (indoor and outdoor), and provides an inclusive analysis of spaces of everyday activities in the hawari of old Cairo. It then broadens its analysis to other parts of the city, highlighting different customs and representations of home in the city at large. Cairo, in the context of this book, is represented as the most sophisticated urban centre in the Middle East with different and sometimes contrasting approaches to the architecture of home, as a practice and spatial system.

In order to analyse the complexity and interconnectedness of the components and elements of the hawari as a 'collective home', it layers its narratives of architectural and social developments as a domestic environment over the past two hundred years, and in doing so, explores the in-depth social meaning and performance of spaces, both private and public.

Why is housing tenure associated with a lower risk of admission to a nursing or residential home? Wealth, health and the incentive to keep 'my home'

Background Previous research has shown that home ownership is associated with a reduced risk of admission to institutional care. The extent to which this reflects associations between wealth and health, between wealth and ability to buy in care or increased motivation to avoid admission related to policies on charging is unclear. Taking account of the value of the home, as well as housing tenure, may provide some clarification as to the relative importance of these factors.
Aims To analyse the probability of admission to residential and nursing home care according to housing tenure and house value.
Methods Cox regression was used to examine the association between home ownership, house value and risk of care home admissions over 6 years of follow-up among a cohort of 51 619 people aged 65 years or older drawn from the Northern Ireland Longitudinal Study, a representative sample of approximate to 28% of the population of Northern Ireland.
Results 4% of the cohort (2138) was admitted during follow-up. Homeowners were less likely than those who rented to be admitted to care homes (HR 0.77, 95% CI 0.70 to 0.85, after adjusting for age, sex, health, living arrangement and urban/rural differences). There was a strong association between house value/tenure and health with those in the highest valued houses having the lowest odds of less than good health or limiting long-term illness. However, there was no difference in probability of admission according to house value; HRs of 0.78 (95% CI 0.67 to 0.90) and 0.81 (95% CI 0.70 to 0.95), respectively, for the lowest and highest value houses compared with renters.
Conclusions The requirement for people in the UK with capital resources to contribute to their care is a significant disincentive to institutional admission. This may place an additional burden on carers.