EAGER: Collaborative: Algorithmic Framework for Anomaly Detection in Interdependent Networks

EAGER：协作：相互依赖网络中异常检测的算法框架

• 批准号: 1646890
• 负责人: Nina Fefferman
• 金额: $ 9.99万
• 依托单位: University of Tennessee Knoxville
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2016
• 资助国家: 美国
• 起止时间: 2016-09-01 至 2019-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1646890&HistoricalAwards=false
• 关键词: EAGER; Collaborative; Algorithmic; Framework; Anomaly

Modern critical infrastructure relies on successful interdependent function among many different types of networks. For example, the Internet depends on access to the power grid, which in turn depends on the power-grid communication network and the energy production network. For this reason, network science researchers have begun examining the robustness of critical infrastructure as a network of networks, or a multilayer network. Research in network anomaly detection systems has focused on single network structures (specifically, the Internet as a single network). Among these methods, some promising detection algorithms rely on decentralized and distributed coordination among many participants, improving meaningfully over results from independent parallel and centralized algorithms. The project involves rigorous analysis of the different challenges and opportunities for anomaly detection posed by multilayer networks relative to single network structures, with a particular focus on how cross-layer information can be effectively used to improve both efficiency and detection as well as how cross-layer threats can create vulnerabilities. The project develops a general framework that can be used in multiple applications to detect large-scale threats to information flow for enhanced security. This has the potential for significant benefit to society through its contribution to enhanced resiliency in the nation's cyber infrastructure and other interdependent critical infrastructure such as the power grid. The combination of concepts and ideas from the cybersecurity community with the network science community will help researchers in both fields to better understand the realistic problems and be aware of each other's problems, results, and techniques.

现代关键基础设施依赖于许多不同类型网络之间成功的相互依赖的功能。例如，互联网依赖于电网接入，而电网接入又依赖于电网通信网络和能源生产网络。出于这个原因，网络科学研究人员已经开始将关键基础设施作为网络网络或多层网络来考察其稳健性。网络异常检测系统的研究主要集中在单一的网络结构(具体地说，将互联网作为一个单一的网络)。在这些方法中，一些有前景的检测算法依赖于多个参与者之间的分散和分布式协调，相对于独立的并行和集中式算法的结果有了很大的改善。该项目涉及严格分析多层网络相对于单一网络结构对异常检测带来的不同挑战和机遇，特别侧重于如何有效地利用跨层信息来提高效率和检测，以及跨层威胁如何产生漏洞。该项目开发了一个通用框架，可以在多个应用程序中使用，以检测信息流的大规模威胁，以增强安全性。这有可能为社会带来重大好处，因为它有助于提高国家网络基础设施和其他相互依存的关键基础设施(如电网)的复原力。网络安全界和网络科学界的概念和思想的结合将有助于这两个领域的研究人员更好地了解现实问题，并了解彼此的问题、结果和技术。

项目成果

Anomaly detection through information sharing under different topologies

通过不同拓扑下的信息共享进行异常检测

• DOI: 10.1186/s13635-017-0056-5
• 发表时间: 2017
• 期刊: EURASIP Journal on Information Security
• 影响因子: 3.6
• 作者: Gallos, Lazaros K.;Korczyński, Maciej;Fefferman, Nina H.
• 通讯作者: Fefferman, Nina H.

Propinquity drives the emergence of network structure and density

• DOI: 10.1073/pnas.1900219116
• 发表时间: 2019-09
• 期刊: Proceedings of the National Academy of Sciences
• 作者: L. Gallos;S. Havlin;H. Stanley;N. Fefferman