A Novel Approach to Intrusion Detection Using a Cognitively-Inspired Algorithm

Simple item page
dc.contributor.authorThomson, Robert
dc.contributor.authorCranford, Edward
dc.contributor.authorSomers, Sterling
dc.contributor.authorLebiere, Christian
dc.date.accessioned2023-12-26T18:36:35Z
dc.date.available2023-12-26T18:36:35Z
dc.date.issued2024-01-03
dc.identifier.doi10.24251/HICSS.2023.116
dc.identifier.isbn978-0-9981331-7-1
dc.identifier.othereb847a32-f5a4-4636-9f3b-920e7b60a561
dc.identifier.urihttps://hdl.handle.net/10125/106493
dc.language.isoeng
dc.relation.ispartofProceedings of the 57th Hawaii International Conference on System Sciences
dc.rightsAttribution-NonCommercial-NoDerivatives 4.0 International
dc.rights.urihttps://creativecommons.org/licenses/by-nc-nd/4.0/
dc.subjectCyber Deception and Cyberpsychology for Defense
dc.subjectcognitive model
dc.subjectcybersecurity
dc.subjectintrusion detection
dc.subjectsalience
dc.titleA Novel Approach to Intrusion Detection Using a Cognitively-Inspired Algorithm
dc.typeConference Paper
dc.type.dcmiText
dcterms.abstractWe propose a novel algorithm for white-box intrusion detection using a cognitive model consistent with the principles of instance-based learning theory. Cognitive models inherit both mechanism and limitations from cognitive architectures implementing unified theories of human cognition. The mechanisms endow the models with powerful characteristics of human cognition, including robustness, generalization and adaptivity. Expanding upon previous research in malware identification and personalized deceptive signaling, the present paper presents a cognitive model able to achieve over 70% accuracy identifying anomalous (vs normal) traffic on the UNSW-NB15 dataset with only 8 features and using only one sample from each attack and 9 normal samples. Accuracy linearly increases to over 85% using up to 100x more samples. A cognitively-inspired salience algorithm then shows the relative impact of each feature driving correct vs incorrect classifications. Implications for integrating this algorithm with human operators are discussed.
dcterms.extent10 pages
prism.startingpage954

Files

Original bundle
Now showing 1 - 1 of 1
Thumbnail Image
Name:
0093.pdf
Size:
700.75 KB
Format:
Adobe Portable Document Format
Download

Collections

Cyber Deception and Cyberpsychology for Defense