Search |  Contact |  SRI Home Do not follow this link, or your host will be blocked from this site. This is a spider trap. Do not follow this link, or your host will be blocked from this site. This is a spider trap. Do not follow this link, or your host will be blocked from this site. This is a spider trap.A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A ASRI International.  333 Ravenswood Avenue.  Menlo Park, CA 94025-3493. SRI International is a nonprofit corporation.

AIC Seminar Series

Applying Plan Recognition to Cyber Attacks

Peter A JarvisAritificial Intelligence Center, SRI International[Home Page]

Date:  2004-03-04 at 16:00

Location:  EJ228  (Directions)

   Abstract

We describe the application of plan recognition techniques to support computer system administrators in processing cyber security alert sets by automatically identifying the hostile intent behind them. Identifying the intent enables us to both prioritize and explain the clusters for succinct user presentation. Our empirical evaluation demonstrates that the approach can handle alert sets of as many as 20 elements and can readily distinguish between false and true alert sets. We discuss important opportunities for the future work that is needed to increase the cardinality of the alert sets supported by the system to the level needed by a deployable application. In particular we outline opportunities to bring the analysts into the process and the opportunities for heuristic improvements to the plan recognition algorithm.

   Bio for Peter A Jarvis

Peter holds a PhD in Artificial Intelligence and a first class BSc in Computer Science. His research interests center around tool support for authoring and managing plans. He has worked in domains as diverse as Air Campaign Planning (USAF) and Product Innovation in the chemical industry (Unilever, ICI, BG Technology). Today he is working on the Department of Defense (DARPA) Active Templates Program to support command and control processes for Special Operations Forces.

   Note for Visitors to SRI

Please arrive at least 10 minutes early as you will need to sign in by following instructions by the lobby phone at Building E. SRI is located at 333 Ravenswood Avenue in Menlo Park. Visitors may park in the parking lots off Fourth Street. Detailed directions to SRI, as well as maps, are available from the Visiting AIC web page. There are two entrances to SRI International located on Ravenswood Ave. Please check the Builing E entrance signage.

SRI International
©2014 SRI International 333 Ravenswood Avenue, Menlo Park, CA 94025-3493
SRI International is an independent, nonprofit corporation. Privacy policy