Repository logo
  • Log In
    Log in via Symplectic to deposit your publication(s).
Repository logo
  • Communities & Collections
  • Research Outputs
  • Statistics
  • Log In
    Log in via Symplectic to deposit your publication(s).
  1. Home
  2. Faculty of Natural Sciences
  3. Faculty of Natural Sciences
  4. Detecting weak dependence in computer network traffic patterns by using higher criticism
 
  • Details
Detecting weak dependence in computer network traffic patterns by using higher criticism
File(s)
main.pdf (438.84 KB)
Accepted version
Author(s)
Price-Williams, Matthew
Heard, Nicholas
Rubin-Delanchy, Patrick
Type
Journal Article
Abstract
To perform robust statistical anomaly detection in cybersecurity, we must build realistic models of the traffic patterns within a computer network. It is therefore important to understand the dependences between the large number of routinely interacting communication pathways within such a network. Pairs of interacting nodes in any directed communication network can be modelled as point processes where events in a process indicate information being sent between two nodes. For two processes A and B denoting the interactions between two distinct pairs of computers, called edges, we wish to assess whether events in A trigger events then to occur in B. A test is introduced to detect such dependence when only a subset of the events in A exhibit a triggering effect on process B; this test will enable us to detect even weakly correlated edges within a computer network graph. Since computer network events occur as a high frequency data stream, we consider the asymptotics of this problem as the number of events goes to ∞, while the proportion exhibiting dependence goes to 0, and examine the performance of tests that are provably consistent in this framework. An example of how this method can be used to detect genuine causal dependences is provided by using real world event data from the enterprise computer network of Los Alamos National Laboratory.
Date Issued
2019-04-01
Date Acceptance
2018-10-16
Citation
Journal of the Royal Statistical Society: Series C, 2019, 68 (3), pp.641-655
URI
http://hdl.handle.net/10044/1/65590
DOI
https://www.dx.doi.org/10.1111/rssc.12325
ISSN
0035-9254
Publisher
Wiley
Start Page
641
End Page
655
Journal / Book Title
Journal of the Royal Statistical Society: Series C
Volume
68
Issue
3
Copyright Statement
© 2018 Royal Statistical Society.
Sponsor
GCHQ
Grant Number
Price-Williams PO-4177302
Subjects
Statistics & Probability
0104 Statistics
Publication Status
Published
Date Publish Online
2018-11-22
About
Spiral Depositing with Spiral Publishing with Spiral Symplectic
Contact us
Open access team Report an issue
Other Services
Scholarly Communications Library Services
logo

Imperial College London

South Kensington Campus

London SW7 2AZ, UK

tel: +44 (0)20 7589 5111

Accessibility Modern slavery statement Cookie Policy

Built with DSpace-CRIS software - Extension maintained and optimized by 4Science

  • Cookie settings
  • Privacy policy
  • End User Agreement
  • Send Feedback