Publication Date: 9/24/2020
Event: IEEE Intelligent Systems
Reference: pp. 1-7, DOI: 10.1109/MIS.2020.3041174, Nov 27, 2020
Authors: Boxiang Dong, Montclair State University; Zhengzhang Chen, NEC Laboratories America, Inc.; Hui (Wendy) Wang, University of Houston; Lu-An Tang, NEC Laboratories America, Inc.; Kai Zhang, Temple University; Ying Lin, Temple University; Zhichun Li, Stellar Cyber; Haifeng Chen, NEC Laboratories America, Inc.
Abstract: Anomaly detection has been widely applied in modern data-driven security applications to detect abnormal events/entities that deviate from the majority. However, less work has been done in terms of detecting suspicious event sequences/paths, which are better discriminators than single events/entities for distinguishing normal and abnormal behaviors in complex systems such as cyber-physical systems. A key and challenging step in this endeavor is how to discover those abnormal event sequences from millions of system event records in an efficient and accurate way. To address this issue, we propose NINA, a network diffusion-based algorithm for identifying anomalous event sequences. Experimental results on both static and streaming data show that NINA is efficient (processes about 2 million records per minute) and accurate.
Publication Link: https://ieeexplore.ieee.org/document/9272840