Search |  Contact |  SRI Home Do not follow this link, or your host will be blocked from this site. This is a spider trap. Do not follow this link, or your host will be blocked from this site. This is a spider trap. Do not follow this link, or your host will be blocked from this site. This is a spider trap.A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A ASRI International.  333 Ravenswood Avenue.  Menlo Park, CA 94025-3493. SRI International is a nonprofit corporation.

AIC Seminar Series

Applying Plan Recognition to Cyber Attacks

Peter A JarvisAritificial Intelligence Center, SRI International[Home Page]

Date:  2004-03-04 at 16:00

Location:  EJ228  (Directions)

   Abstract

We describe the application of plan recognition techniques to support computer system administrators in processing cyber security alert sets by automatically identifying the hostile intent behind them. Identifying the intent enables us to both prioritize and explain the clusters for succinct user presentation. Our empirical evaluation demonstrates that the approach can handle alert sets of as many as 20 elements and can readily distinguish between false and true alert sets. We discuss important opportunities for the future work that is needed to increase the cardinality of the alert sets supported by the system to the level needed by a deployable application. In particular we outline opportunities to bring the analysts into the process and the opportunities for heuristic improvements to the plan recognition algorithm.

   Bio for Peter A Jarvis

Peter holds a PhD in Artificial Intelligence and a first class BSc in Computer Science. His research interests center around tool support for authoring and managing plans. He has worked in domains as diverse as Air Campaign Planning (USAF) and Product Innovation in the chemical industry (Unilever, ICI, BG Technology). Today he is working on the Department of Defense (DARPA) Active Templates Program to support command and control processes for Special Operations Forces.

   Note for Visitors to SRI

Please arrive at least 10 minutes early in order to sign in and be escorted to the conference room. SRI is located at 333 Ravenswood Avenue in Menlo Park. Visitors may park in the visitors lot in front of Building E, and should follow the instructions by the lobby phone to be escorted to the meeting room. Detailed directions to SRI, as well as maps, are available from the Visiting AIC web page.

SRI International
©2014 SRI International 333 Ravenswood Avenue, Menlo Park, CA 94025-3493
SRI International is an independent, nonprofit corporation. Privacy policy