Tracking Cyber Adversaries with Adaptive Indicators of Compromise

A forensics investigation after a breach often uncovers network and host indicators of compromise (IOCs) that can be deployed to sensors to allow early detection of the adversary in the future. Over time, the adversary will change tactics, techniques, and procedures (TTPs), which will also change the data generated. If the IOCs are not kept up-to-date with the adversary's new TTPs, the adversary will no longer be detected once all of the IOCs become invalid. Tracking the Known (TTK) is the problem of keeping IOCs, in this case regular expressions (regexes), up-to-date with a dynamic adversary. Our framework solves the TTK problem in an automated, cyclic fashion to bracket a previously discovered adversary. This tracking is accomplished through a data-driven approach of self-adapting a given model based on its own detection capabilities. In our initial experiments, we found that the true positive rate (TPR) of the adaptive solution degrades much less significantly over time than the naive solution, suggesting that self-updating the model allows the continued detection of positives (i.e., adversaries). The cost for this performance is in the false positive rate (FPR), which increases over time for the adaptive solution, but remains constant for the naive solution. However, the difference in overall detection performance, as measured by the area under the curve (AUC), between the two methods is negligible. This result suggests that self-updating the model over time should be done in practice to continue to detect known, evolving adversaries.Comment: This was presented at the 4th Annual Conf. on Computational Science & Computational Intelligence (CSCI'17) held Dec 14-16, 2017 in Las Vegas, Nevada, US

A Riemann solver at a junction compatible with a homogenization limit

We consider a junction regulated by a traffic lights, with n incoming roads and only one outgoing road. On each road the Phase Transition traffic model, proposed in [6], describes the evolution of car traffic. Such model is an extension of the classic Lighthill-Whitham-Richards one, obtained by assuming that different drivers may have different maximal speed. By sending to infinity the number of cycles of the traffic lights, we obtain a justification of the Riemann solver introduced in [9] and in particular of the rule for determining the maximal speed in the outgoing road.Comment: 19 page

Pemodelan Pertumbuhan Ekonomi Indonesia Menggunakan Data Panel Dinamis Dengan Pendekatan Generalized Method of Moment Arellano-Bond

Pertumbuhan ekonomi merupakan Perubahan aktivitas perekonomian dalam menghasilkan tambahan pendapatan masyarakat suatu negara dalam periode tertentu. Variabel-variabel ekonomi bersifat dinamis sehingga pada penelitian ini digunakan pemodelan menggunakan metode regresi data panel dinamis. Metode regresi data panel dinamis tidak hanya untuk mengetahui efek jangka pendek (short-run effect), namun juga efek jangka panjang (long-run effect). Faktor-faktor yang diduga mempengaruhi pertumbuhan ekonomi di Indonesia adalah investasi luar negeri, pengeluaran pemerintah dan penyerapan tenaga kerja. Berdasarkan hasil analisis estimasi Generalized Method of Moment (GMM) Arellano-Bond, variabel yang berpengaruh signifikan terhadap pertumbuhan ekonomi adalah investasi luar negeri dan pengeluaran pemerintah. Selanjutnya mendapatkan pemodelan dan mengetahui elastisitas jangka pendek dan jangka panjang. Elastisitas jangka pendek investasi luar negeri sebesar 0,00269 dan jangka panjang sebesar 0,08661. Hal ini menunjukkan bahwa setiap peningkatan 10 persen investasi luar negeri suatu provinsi, maka akan meningkatkan Produk Domestik Regional Bruto (PDRB) secara jangka pendek sebesar 0,0269 persen dan jangka panjang sebesar 0,8661 persen. Elastisitas jangka pendek pengeluaran pemerintah sebesar 0,00198 dan jangka panjang sebesar 0,06384. Hal ini menunjukkan bahwa setiap peningkatan 10 persen pengeluaran pemerintah suatu provinsi, maka akan meningkatkan PDRB secara jangka pendek sebesar 0,0198 persen dan jangka panjang sebesar 0,6384 persen

Modeling Hidden Nodes Collisions in Wireless Sensor Networks: Analysis Approach

This paper studied both types of collisions. In this paper, we show that advocated solutions for coping with hidden node collisions are unsuitable for sensor networks. We model both types of collisions and derive closed-form formula giving the probability of hidden and visible node collisions. To reduce these collisions, we propose two solutions. The first one based on tuning the carrier sense threshold saves a substantial amount of collisions by reducing the number of hidden nodes. The second one based on adjusting the contention window size is complementary to the first one. It reduces the probability of overlapping transmissions, which reduces both collisions due to hidden and visible nodes. We validate and evaluate the performance of these solutions through simulations

Case Studies of Environmental Visualization

The performance gap between simulation and reality has been identified as a major challenge to achieving sustainability in the Built Environment. While Post-Occupancy Evaluation (POE) surveys are an integral part of better understanding building performance, and thus addressing this issue, the importance of POE remains relatively unacknowledged within the wider Built Environment community. A possible reason that has been highlighted is that POE survey data is not easily understood and utilizable by non-expert stakeholders, including designers. A potential method by which to address this is the visualization method, which has well established benefits for communication of big datasets. This paper presents two case studies where EnViz (short for “Environmental Visualization”), a prototype software application developed for research purposes, was utilized and its effectiveness tested via a range of analysis tasks. The results are discussed and compared with those of previous work that utilized variations of the methods presented here. The paper concludes by presenting the lessons drawn from the five-year period of EnViz, emphasizing the potential of environmental visualization for decision support in environmental design and engineering for the built environment, and suggests directions for future development

A Study on the Necessary Expenses for Business Income

亜細亜大学修士（法学）thesi

Crystal structure and electrical properties of textured Ba2Bi4Ti5O18 ceramics

Highly textured Ba2Bi4Ti5O18 ceramic was prepared by spark plasma sintering (SPS). X-ray diffraction of the ceramics revealed the coexistence of a major ferroelectric phase (Space group, SG: B2cb) and a minor paraelectric phase (SG: I4/mmm) at room temperature. A diffused phase transition was observed at around 240 °C. The evolution of the switching current peaks in the electric current vs. electric field (I-E) loops with increasing temperature was interpreted by the structural changes and temperature dependent polarisation reversal processes. The slim polarisation vs. electric field (P-E) loops, the extra switching current peaks in the I-E loops and the non-zero piezoelectric d33 coefficient indicate that Ba2Bi4Ti5O18 is a relaxor ferroelectric material. The recoverable energy density (0.41 ± 0.01 J/cm3) of Ba2Bi4Ti5O18 ceramics in the perpendicular direction to the SPS pressing direction is close to that of Pb(Mg1/3Nb2/3)O3-based ceramics. The obtained results suggest Ba2Bi4Ti5O18 ceramics might be promising for energy storage applications

Observation of b→dγ and Determination of |Vtd/Vts|

journal articl

Lessons from the crisis: Dangers and opportunities in the Asian financial crisis

This study generates an overview of the 1997 Asian financial crisis, from its causes to the consequences. At the same time, it examines the context of the crisis, which includes the review of historical Asian development and the role of the International Monetary Fund (IMF) in the financial crisis. Particular attention is given to the crisis‘ impact on the local economy and people. In this it differs from existing research that analyses the impact on its own, this study links the crisis‘ impact to the foreign direct investment (FDI). The impact of the crisis, therefore, is reflected by examining the control power of the FDI money. It examines the crisis‘ impact through focusing on a unique angle of the two elements in the crisis – danger and opportunity. The results show that the social impact of the crisis put local people in danger of unemployment, underemployment, falling real wages and growing social inequality and lowered land and commodity prices, which dramatically reduced the cost of production. Accordingly, the control power of the FDI money increased extensively in the crisis, which represents the increasing danger of unfair exploitation of local labour and enclosure of land and resources which can be seen as opportunities beneficial to the international capitalists