Ensemble fuzzy belief intrusion detection design

With the rapid growth of the Internet, computer attacks are increasing at a fast pace and can easily cause millions of dollar in damage to an organization. Detecting these attacks is an important issue of computer security. There are many types of attacks and they fall into four main categories, Denial of Service (DoS) attacks, Probe, User to Root (U2R) attacks, and Remote to Local (R2L) attacks. Within these categories, DoS and Probe attacks continuously show up with greater frequency in a short period of time when they attack systems. They are different from the normal traffic data and can be easily separated from normal activities. On the contrary, U2R and R2L attacks are embedded in the data portions of the packets and normally involve only a single connection. It becomes difficult to achieve satisfactory detection accuracy for detecting these two attacks. Therefore, we focus on studying the ambiguity problem between normal activities and U2R/R2L attacks. The goal is to build a detection system that can accurately and quickly detect these two attacks. In this dissertation, we design a two-phase intrusion detection approach. In the first phase, a correlation-based feature selection algorithm is proposed to advance the speed of detection. Features with poor prediction ability for the signatures of attacks and features inter-correlated with one or more other features are considered redundant. Such features are removed and only indispensable information about the original feature space remains. In the second phase, we develop an ensemble intrusion detection system to achieve accurate detection performance. The proposed method includes multiple feature selecting intrusion detectors and a data mining intrusion detector. The former ones consist of a set of detectors, and each of them uses a fuzzy clustering technique and belief theory to solve the ambiguity problem. The latter one applies data mining technique to automatically extract computer users’ normal behavior from training network traffic data. The final decision is a combination of the outputs of feature selecting and data mining detectors. The experimental results indicate that our ensemble approach not only significantly reduces the detection time but also effectively detect U2R and R2L attacks that contain degrees of ambiguous information.

Functionalized carbon nanotube nanoelectrodes for biomolecular recognition

The objective of this research is to develop nanoscale ultrasensitive transducers for detection of biological species at molecular level using carbon nanotubes as nanoelectrodes. Rapid detection of ultra low concentration or even single DNA molecules are essential for medical diagnosis and treatment, pharmaceutical applications, gene sequencing as well as forensic analysis. Here the use of functionalized single walled carbon nanotubes (SWNT) as nanoscale detection platform for rapid detection of single DNA molecules is demonstrated. The detection principle is based on obtaining electrical signal from a single amine terminated DNA molecule which is covalently bridged between two ends of an SWNT separated by a nanoscale gap. The synthesis, fabrication, chemical functionalization of nanoelectrodes and DNA attachment were optimized to perform reliable electrical characterization these molecules. Using this detection system fundamental study on charge transport in DNA molecule of both genomic and non genomic sequences is performed. We measured an electrical signal of about 30 pA through a hybridized DNA molecule of 80 base pair in length which encodes a portion of sequence of H5N1 gene of avian Influenza A virus. Due the dynamic nature of the DNA molecules the local environment such as ion concentration, pH and temperature significantly influence its physical properties. We observed a decrease in DNA conductance of about 33% in high vacuum conditions. The counterion variation was analyzed by changing the buffer from sodium acetate to tris(hydroxymethyl) aminomethane, which resulted in a two orders of magnitude increase in the conductivity of the DNA. The fabrication of large array of identical SWNT nanoelectrodes was achieved by using ultralong SWNTs. Using these nanoelectrode array we have investigated the sequence dependent charge transport in DNA. A systematic study performed on PolyG - PolyC sequence with varying number of intervening PolyA - PolyT pairs showed a decrease in electrical signal from 180 pA (PolyG - PolyC) to 30 pA with increasing number of the PolyA - PolyT pairs. This work also led to the development of ultrasensitive nanoelectrodes based on enzyme functionalized vertically aligned high density multiwalled CNTs for electrochemical detection of cholesterol. The nanoelectrodes exhibited selectively detection of cholesterol in the presence of common interferents found in human blood.

Ensemble Fuzzy Belief Intrusion Detection Design

With the rapid growth of the Internet, computer attacks are increasing at a fast pace and can easily cause millions of dollar in damage to an organization. Detecting these attacks is an important issue of computer security. There are many types of attacks and they fall into four main categories, Denial of Service (DoS) attacks, Probe, User to Root (U2R) attacks, and Remote to Local (R2L) attacks. Within these categories, DoS and Probe attacks continuously show up with greater frequency in a short period of time when they attack systems. They are different from the normal traffic data and can be easily separated from normal activities. On the contrary, U2R and R2L attacks are embedded in the data portions of the packets and normally involve only a single connection. It becomes difficult to achieve satisfactory detection accuracy for detecting these two attacks. Therefore, we focus on studying the ambiguity problem between normal activities and U2R/R2L attacks. The goal is to build a detection system that can accurately and quickly detect these two attacks. In this dissertation, we design a two-phase intrusion detection approach. In the first phase, a correlation-based feature selection algorithm is proposed to advance the speed of detection. Features with poor prediction ability for the signatures of attacks and features inter-correlated with one or more other features are considered redundant. Such features are removed and only indispensable information about the original feature space remains. In the second phase, we develop an ensemble intrusion detection system to achieve accurate detection performance. The proposed method includes multiple feature selecting intrusion detectors and a data mining intrusion detector. The former ones consist of a set of detectors, and each of them uses a fuzzy clustering technique and belief theory to solve the ambiguity problem. The latter one applies data mining technique to automatically extract computer users’ normal behavior from training network traffic data. The final decision is a combination of the outputs of feature selecting and data mining detectors. The experimental results indicate that our ensemble approach not only significantly reduces the detection time but also effectively detect U2R and R2L attacks that contain degrees of ambiguous information.

A study of methods used to analyze total oil and polycyclic aromatic hydrocarbons in produced water: steps towards the validation of molecularly imprinted polymers for use in marine environmetns

Produced water is a by-product of offshore oil and gas production, and is released in large volumes when platforms are actively processing crude oil. Some pollutants are not typically removed by conventional oil/water separation methods and are discharged with produced water. Oil and grease can be found dispersed in produced water in the form of tiny droplets, and polycyclic aromatic hydrocarbons (PAHs) are commonly found dissolved in produced water. Both can have acute and chronic toxic effects in marine environments even at low exposure levels. The analysis of the dissolved and dispersed phases are a priority, but effort is required to meet the necessary detection limits. There are several methods for the analysis of produced water for dispersed oil and dissolved PAHs, all of which have advantages and disadvantages. In this work, EPA Method 1664 and APHA Method 5520 C for the determination of oil and grease will be examined and compared. For the detection of PAHs, EPA Method 525 and PAH MIPs will be compared, and results evaluated. APHA Method 5520 C Partition-Infrared Method is a liquid-liquid extraction procedure with IR determination of oil and grease. For analysis on spiked samples of artificial seawater, extraction efficiency ranged from 85 – 97%. Linearity was achieved in the range of 5 – 500 mg/L. This is a single-wavelength method and is unsuitable for quantification of aromatics and other compounds that lack sp³-hybridized carbon atoms. EPA Method 1664 is the liquid-liquid extraction of oil and grease from water samples followed by gravimetric determination. When distilled water spiked with reference oil was extracted by this procedure, extraction efficiency ranged from 28.4 – 86.2%, and %RSD ranged from 7.68 – 38.0%. EPA Method 525 uses solid phase extraction with analysis by GC-MS, and was performed on distilled water and water from St. John’s Harbour, all spiked with naphthalene, fluorene, phenanthrene, and pyrene. The limits of detection in harbour water were 0.144, 3.82, 0.119, and 0.153 g/L respectively. Linearity was obtained in the range of 0.5-10 g/L, and %RSD ranged from 0.36% (fluorene) to 46% (pyrene). Molecularly imprinted polymers (MIPs) are sorbent materials made selective by polymerizing functional monomers and crosslinkers in the presence of a template molecule, usually the analytes of interest or related compounds. They can adsorb and concentrate PAHs from aqueous environments and are combined with methods of analysis including GC-MS, LC-UV-Vis, and desorption electrospray ionization (DESI)- MS. This work examines MIP-based methods as well as those methods previously mentioned which are currently used by the oil and gas industry and government environmental agencies. MIPs are shown to give results consistent with other methods, and are a low-cost alternative improving ease, throughput, and sensitivity. PAH MIPs were used to determine naphthalene spiked into ASTM artificial seawater, as well as produced water from an offshore oil and gas operation. Linearity was achieved in the range studied (0.5 – 5 mg/L) for both matrices, with R² = 0.936 for seawater and R² = 0.819 for produced water. The %RSD for seawater ranged from 6.58 – 50.5% and for produced water, from 8.19 – 79.6%.

Development of calix[4]arene-functionalized microcantilever array sensing system for the rapid, sensitive and simultaneous detection of metal ions in aqueous solutions

The work described in this thesis was conducted with the aim of: 1) investigating the binding capabilities of calix[4]arene-functionalized microcantilevers towards specific metal ions and 2) developing a new16-microcantilever array sensing system for the rapid, and simultaneous detection of metal ions in fresh water. Part I of this thesis reports on the use of three new bimodal calix[4]arenes (methoxy, ethoxy and crown) as potential host/guest sensing layers for detecting selected ions in dilute aqueous solutions using single microcantilever experimental system. In this work it was shown that modifying the upper rim of the calix[4]arenes with a thioacetate end group allow calix[4]arenes to self-assemble on Au(111) forming complete highly ordered monolayers. It was also found that incubating the microcantilevers coated with 5 nm of Inconel and 40 nm of Au for 1 h in a 1.0 M solution of calix[4]arene produced the highest sensitivity. Methoxy-functionalized microcantilevers showed a definite preference for Ca²⁺ ions over other cationic guests and were able to detect trace concentration as low as 10⁻¹² M in aqueous solutions. Microcantilevers modified with ethoxy calix[4]arene displayed their highest sensitivity towards Sr²⁺ and to a lesser extent Ca²⁺ ions. Crown calix[4]arene-modified microcantilevers were however found to bind selectively towards Cs⁺ ions. In addition, the counter anion was also found to contribute to the deflection. For example methoxy calix[4]arene-modified microcantilever was found to be more sensitive to CaCl₂ over other water-soluble calcium salts such as Ca(NO₃)₂ , CaBr₂ and CaI₂. These findings suggest that the response of calix[4]arene-modified microcantilevers should be attributed to the target ionic species as a whole instead of only considering the specific cation and/or anion. Part II presents the development of a 16-microcantilever sensor setup. The implementation of this system involved the creation of data analysis software that incorporates data from the motorized actuator and a two-axis photosensitive detector to obtain the deflection signal originating from each individual microcantilever in the array. The system was shown to be capable of simultaneous measurements of multiple microcantilevers with different coatings. A functionalization unit was also developed that allows four microcantilevers in the array to be coated with an individual sensing layer one at the time. Because of the variability of the spring constants of different cantilevers within the array, results presented were quoted in units of surface stress unit in order to compare values between the microcantilevers in the array.

(Table 1) Ratio of hydroxy-GDGT vs. the total core GDGT was calculated based on the detection of hydroxy-GDGT

Hydroxylated glycerol dialkyl glycerol tetraethers (hydroxy-GDGTs) were detected in marine sediments of diverse depositional regimes and ages. Mass spectrometric evidence, complemented by information gleaned from two-dimensional (2D) 1H-13C nuclear magnetic resonance (NMR) spectroscopy on minute quantities of target analyte isolated from marine sediment, allowed us to identify one major compound as a monohydroxy-GDGT with acyclic biphytanyl moieties (OH-GDGT-0). NMR spectroscopic and mass spectrometric data indicate the presence of a tertiary hydroxyl group suggesting the compounds are the tetraether analogues of the widespread hydroxylated archaeol derivatives that have received great attention in geochemical studies of the last two decades. Three other related compounds were assigned as acyclic dihydroxy-GDGT (2OH-GDGT-0) and monohydroxy-GDGT with one (OH-GDGT-1) and two cyclopentane rings (OH-GDGT-2). Based on the identification of hydroxy-GDGT core lipids, a group of previously reported unknown intact polar lipids (IPLs), including the ubiquitously distributed H341-GDGT (Lipp J. S. and Hinrichs K. -U. (2009) Structural diversity and fate of intact polar lipids in marine sediments. Geochim. Cosmochim. Acta 73, 6816-6833), and its analogues were tentatively identified as glycosidic hydroxy-GDGTs. In addition to marine sediments, we also detected hydroxy-GDGTs in a culture of Methanothermococcus thermolithotrophicus. Given the previous finding of the putative polar precursor H341-GDGT in the planktonic marine crenarchaeon Nitrosopumilus maritimus, these compounds are synthesized by representatives of both cren- and euryarchaeota. The ubiquitous distribution and apparent substantial abundance of hydroxy-GDGT core lipids in marine sediments (up to 8% of total isoprenoid core GDGTs) point to their potential as proxies.

Single-cell functional analysis of parathyroid adenomas reveals distinct classes of calcium sensing behaviour in primary hyperparathyroidism.

Primary hyperparathyroidism (PHPT) is a common endocrine neoplastic disorder caused by a failure of calcium sensing secondary to tumour development in one or more of the parathyroid glands. Parathyroid adenomas are comprised of distinct cellular subpopulations of variable clonal status that exhibit differing degrees of calcium responsiveness. To gain a clearer understanding of the relationship among cellular identity, tumour composition and clinical biochemistry in PHPT, we developed a novel single cell platform for quantitative evaluation of calcium sensing behaviour in freshly resected human parathyroid tumour cells. Live-cell intracellular calcium flux was visualized through Fluo-4-AM epifluorescence, followed by in situ immunofluorescence detection of the calcium sensing receptor (CASR), a central component in the extracellular calcium signalling pathway. The reactivity of individual parathyroid tumour cells to extracellular calcium stimulus was highly variable, with discrete kinetic response patterns observed both between and among parathyroid tumour samples. CASR abundance was not an obligate determinant of calcium responsiveness. Calcium EC50 values from a series of parathyroid adenomas revealed that the tumours segregated into two distinct categories. One group manifested a mean EC50 of 2.40 mM (95% CI: 2.37-2.41), closely aligned to the established normal range. The second group was less responsive to calcium stimulus, with a mean EC50 of 3.61 mM (95% CI: 3.45-3.95). This binary distribution indicates the existence of a previously unappreciated biochemical sub-classification of PHPT tumours, possibly reflecting distinct etiological mechanisms. Recognition of quantitative differences in calcium sensing could have important implications for the clinical management of PHPT.

Experimental detection of sudden stiffness change in a structural system employing Laser Doppler Vibrometry

Sudden changes in the stiffness of a structure are often indicators of structural damage. Detection of such sudden stiffness change from the vibrations of structures is important for Structural Health Monitoring (SHM) and damage detection. Non-contact measurement of these vibrations is a quick and efficient way for successful detection of sudden stiffness change of a structure. In this paper, we demonstrate the capability of Laser Doppler Vibrometry to detect sudden stiffness change in a Single Degree Of Freedom (SDOF) oscillator within a laboratory environment. The dynamic response of the SDOF system was measured using a Polytec RSV-150 Remote Sensing Vibrometer. This instrument employs Laser Doppler Vibrometry for measuring dynamic response. Additionally, the vibration response of the SDOF system was measured through a MicroStrain G-Link Wireless Accelerometer mounted on the SDOF system. The stiffness of the SDOF system was experimentally determined through calibrated linear springs. The sudden change of stiffness was simulated by introducing the failure of a spring at a certain instant in time during a given period of forced vibration. The forced vibration on the SDOF system was in the form of a white noise input. The sudden change in stiffness was successfully detected through the measurements using Laser Doppler Vibrometry. This detection from optically obtained data was compared with a detection using data obtained from the wireless accelerometer. The potential of this technique is deemed important for a wide range of applications. The method is observed to be particularly suitable for rapid damage detection and health monitoring of structures under a model-free condition or where information related to the structure is not sufficient.

Development of Plasmonic Nanoplatforms for Diagnostics, Therapy, and Sensing

Recent advances in nanotechnology have led to the application of nanoparticles in a wide variety of fields. In the field of nanomedicine, there is great emphasis on combining diagnostic and therapeutic modalities into a single nanoparticle construct (theranostics). In particular, anisotropic nanoparticles have shown great potential for surface-enhanced Raman scattering (SERS) detection due to their unique optical properties. Gold nanostars are a type of anisotropic nanoparticle with one of the highest SERS enhancement factors in a non-aggregated state. By utilizing the distinct characteristics of gold nanostars, new plasmonic materials for diagnostics, therapy, and sensing can be synthesized. The work described herein is divided into two main themes. The first half presents a novel, theranostic nanoplatform that can be used for both SERS detection and photodynamic therapy (PDT). The second half involves the rational design of silver-coated gold nanostars for increasing SERS signal intensity and improving reproducibility and quantification in SERS measurements.

The theranostic nanoplatforms consist of Raman-labeled gold nanostars coated with a silica shell. Photosensitizer molecules for PDT can be loaded into the silica matrix, while retaining the SERS signal of the gold nanostar core. SERS detection and PDT are performed at different wavelengths, so there is no interference between the diagnostic and therapeutic modalities. Singlet oxygen generation (a measure of PDT effectiveness) was demonstrated from the drug-loaded nanocomposites. In vitro testing with breast cancer cells showed that the nanoplatform could be successfully used for PDT. When further conjugating the nanoplatform with a cell-penetrating peptide (CPP), efficacy of both SERS detection and PDT is enhanced.

The rational design of plasmonic nanoparticles for SERS sensing involved the synthesis of silver-coated gold nanostars. Investigation of the silver coating process revealed that preservation of the gold nanostar tips was necessary to achieve the increased SERS intensity. At the optimal amount of silver coating, the SERS intensity is increased by over an order of magnitude. It was determined that a majority of the increased SERS signal can be attributed to reducing the inner filter effect, as the silver coating process moves the extinction of the particles far away from the laser excitation line. To improve reproducibility and quantitative SERS detection, an internal standard was incorporated into the particles. By embedding a small-molecule dye between the gold and silver surfaces, SERS signal was obtained both from the internal dye and external analyte on the particle surface. By normalizing the external analyte signal to the internal reference signal, reproducibility and quantitative analysis are improved in a variety of experimental conditions.

Process Monitoring and Defect Detection of Additive Manufacturing Using Inline Coherent Imaging

With applications ranging from aerospace to biomedicine, additive manufacturing (AM) has been revolutionizing the manufacturing industry. The ability of additive techniques, such as selective laser melting (SLM), to create fully functional, geometrically complex, and unique parts out of high strength materials is of great interest. Unfortunately, despite numerous advantages afforded by this technology, its widespread adoption is hindered by a lack of on-line, real time feedback control and quality assurance techniques. In this thesis, inline coherent imaging (ICI), a broadband, spatially coherent imaging technique, is used to observe the SLM process in 15 - 45 $\mu m$ 316L stainless steel. Imaging of both single and multilayer builds is performed at a rate of 200 $kHz$, with a resolution of tens of microns, and a high dynamic range rendering it impervious to blinding from the process beam. This allows imaging before, during, and after laser processing to observe changes in the morphology and stability of the melt. Galvanometer-based scanning of the imaging beam relative to the process beam during the creation of single tracks is used to gain a unique perspective of the SLM process that has been so far unobservable by other monitoring techniques. Single track processing is also used to investigate the possibility of a preliminary feedback control parameter based on the process beam power, through imaging with both coaxial and 100 $\mu m$ offset alignment with respect to the process beam. The 100 $\mu m$ offset improved imaging by increasing the number of bright A-lines (i.e. with signal greater than the 10 $dB$ noise floor) by 300\%. The overlap between adjacent tracks in a single layer is imaged to detect characteristic fault signatures. Full multilayer builds are carried out and the resultant ICI images are used to detect defects in the finished part and improve upon the initial design of the build system. Damage to the recoater blade is assessed using powder layer scans acquired during a 3D build. The ability of ICI to monitor SLM processes at such high rates with high resolution offers extraordinary potential for future advances in on-line feedback control of additive manufacturing.

On covariate factor detection and removal for robust gait recognition

We propose a novel bolt-on module capable of boosting the robustness of various single compact 2D gait representations. Gait recognition is negatively influenced by covariate factors including clothing and time which alter the natural gait appearance and motion. Contrary to traditional gait recognition, our bolt-on module remedies this by a dedicated covariate factor detection and removal procedure which we quantitatively and qualitatively evaluate. The fundamental concept of the bolt-on module is founded on exploiting the pixel-wise composition of covariate factors. Results demonstrate how our bolt-on module is a powerful component leading to significant improvements across gait representations and datasets yielding state-of-the-art results.

Video anomaly detection in real-time on a Power-Aware Heterogeneous Platform

FPGAs and GPUs are often used when real-time performance in video processing is required. An accelerated processor is chosen based on task-specific priorities (power consumption, processing time and detection accuracy), and this decision is normally made once at design time. All three characteristics are important, particularly in battery-powered systems. Here we propose a method for moving selection of processing platform from a single design-time choice to a continuous run time one.We implement Histogram of Oriented Gradients (HOG) detectors for cars and people and Mixture of Gaussians (MoG) motion detectors running across FPGA, GPU and CPU in a heterogeneous system. We use this to detect illegally parked vehicles in urban scenes. Power, time and accuracy information for each detector is characterised. An anomaly measure is assigned to each detected object based on its trajectory and location, when compared to learned contextual movement patterns. This drives processor and implementation selection, so that scenes with high behavioural anomalies are processed with faster but more power hungry implementations, but routine or static time periods are processed with power-optimised, less accurate, slower versions. Real-time performance is evaluated on video datasets including i-LIDS. Compared to power-optimised static selection, automatic dynamic implementation mapping is 10% more accurate but draws 12W extra power in our testbed desktop system.

A new generation of companion diagnostics: cobas BRAF, KRAS and EGFR mutation detection tests

The cobas® (Roche) portfolio of companion diagnostics in oncology currently has three assays CE-marked for in vitro diagnostics. Two of these (EGFR and BRAF) are also US FDA-approved. These assays detect clinically relevant mutations that are correlated with response (BRAF, EGFR) or lack of response (KRAS) to targeted therapies such as selective mutant BRAF inhibitors in malignant melanoma, tyrosine kinases inhibitor in non-small cell lung cancer and anti-EGFR monoclonal antibodies in colorectal cancer, respectively. All these assays are run on a single platform using DNA extracted from a single 5 µm section of a formalin-fixed paraffin-embedded tissue block. The assays provide an ‘end-to-end’ solution from extraction of DNA to automated analysis and report on the cobas z 480. The cobas tests have shown robust and reproducible performance, with high sensitivity and specificity and low limit of detection, making them suitable as companion diagnostics for clinical use.

Enzyme-induced Aggregation of Plasmonic Nanoparticles for the Development of Label-free and Ultrasensitive Detection of Bacterial DNA

Sensitive detection of pathogens is critical to ensure the safety of food supplies and to prevent bacterial disease infection and outbreak at the first onset. While conventional techniques such as cell culture, ELISA, PCR, etc. have been used as the predominant detection workhorses, they are however limited by either time-consuming procedure, complicated sample pre-treatment, expensive analysis and operation, or inability to be implemented at point-of-care testing. Here, we present our recently developed assay exploiting enzyme-induced aggregation of plasmonic gold nanoparticles (AuNPs) for label-free and ultrasensitive detection of bacterial DNA. In the experiments, AuNPs are first functionalized with specific, single-stranded RNA probes so that they exhibit high stability in solution even under high electrolytic condition thus exhibiting red color. When bacterial DNA is present in a sample, a DNA-RNA heteroduplex will be formed and subsequently prone to the RNase H cleavage on the RNA probe, allowing the DNA to liberate and hybridize with another RNA strand. This continuously happens until all of the RNA strands are cleaved, leaving the nanoparticles ‘unprotected’. The addition of NaCl will cause the ‘unprotected’ nanoparticles to aggregate, initiating a colour change from red to blue. The reaction is performed in a multi-well plate format, and the distinct colour signal can be discriminated by naked eye or simple optical spectroscopy. As a result, bacterial DNA as low as pM could be unambiguously detected, suggesting that the enzyme-induced aggregation of AuNPs assay is very easy to perform and sensitive, it will significantly benefit to development of fast and ultrasensitive methods that can be used for disease detection and diagnosis.

ENCARA: real-time detection of frontal faces

[EN]This paper describes a real-time approach for face detection and selection of frontal views, for further processing. Typically, face detection papers provide results for a set of single images but the problem of face detection in video streams rarely is tackled. Instead of performing an exhaustive search for every video stream frame a set of opportunistic ideas applied in a cascade fashion and based on temporal and spatial coherence provide promising results in real-time.