Agile monitoring for cyber defense

Proceedings - DARPA Information Survivability Conference and Exposition II, DISCEX 2001

Volumn 1, Issue , 2001, Pages 318-328

  Doyle, J ^a   Kohane, I ^b   Long, W ^a   Shrobe, H ^a   Szolovits, P ^a  

^a MASSACHUSETTS INSTITUTE OF TECHNOLOGY   (United States)

^b BOSTON CHILDREN S HOSPITAL   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

NETWORK SECURITY;

DISTRIBUTED MONITORING; EVENT DESCRIPTION; EVENT RECOGNITION; INTERPRETATION TOOLS; MONITORING PROCESS; MONITORING SYSTEM; RAPID CONSTRUCTION; SELF-MONITORING;

MONITORING;

EID: 84964413051     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/DISCEX.2001.932227     Document Type: Conference Paper

References (29)

1. P. Cohen, R. Schrag, E. Jones, A. Pease, A. Lin, B. Starr, D. Gunning, and M. Burke. The darpa high-performance knowledge bases project. AI Magazine, 19(4):25-49, Winter 1998.
2. A. K. Das and M. A. Musen. A comparison of the temporal expressiveness of three database query methods. In Nineteenth Annual Symposium on Computer Applications in Medical Care, pages 331-337, New Orleans, LA, 1995.
3. M. T. DeSouza. Automated medical trend detection. Master's thesis, Massachusetts Institute of Technology, Cambridge, Massachusetts, May 2000.
4. J. Doyle. A reasoning economy for planning and replanning. In M. H. Burstein, editor, Proceedings of the 1994 ARPA/Rome Laboratory Knowledge-Based Planning and Scheduling Initiative Workshop, pages 35-43, San Francisco, CA, 1994. Morgan Kaufmann.
5. J. Doyle, I. Kohane, W. Long, H. Shrobe, and P. Szolovits. Event recognition beyond signature and anomaly. In Proceedings of the Second IEEE SMC Information Assurance Workshop. IEEE, IEEE Computer Society, June 2001.
6. J. Doyle and M. McGeachie. Qualitative preferential control of alerting behavior. Submitted for publication, 2001.
7. J. Doyle, Y. Shoham, and M. P. Wellman. A logic of relative desire (preliminary report). In Z. W. Ras and M. Zemankova, editors, Methodologies for Intelligent Systems, 6, volume 542 of Lecture Notes in Artificial Intelligence, pages 16-31, Berlin, Oct. 1991. Springer-Verlag.
8. J. Doyle and M. P. Wellman. Representing preferences as ceteris paribus comparatives. In S. Hanks, S. Russell, and M. P. Wellman, editors, Proceedings of the AAAI Spring Symposium on Decision-Theoretic Planning, 1994.
9. x. In AAAI Spring Symposium: Interpreting Clinical Data, Palo Alto, 1994. AAAI Press.
10. P. Haddawy and S. Hanks. Representations for decision-theoretic planning: Utility functions for deadline goals. In B. Nebel, C. Rich, and W. Swartout, editors, Proceedings of the Third International Conference on Principles of Knowledge Representation and Reasoning, pages 71-82, San Mateo, CA, 1992. Morgan Kaufmann.
11. I. J. Haimowitz and I. S. Kohane. Automated trend detection with alternate temporal hypotheses. In Proceedings of the Thirteenth International Joint Conference on Artificial Intelligence, pages 146-151, Chambery, France, 1993.
12. I. J. Haimowitz and I. S. Kohane. An epistemology for clinically significant trends. In Proceedings of the Eleventh National Conference on Artificial Intelligence, pages 176-181, Washington, DC, 1993.
13. B. Hayes-Roth, S. Uckun, J. E. Larsson, J. Drakopoulos, D. Gaba, J. Barr, and J. Chien. Guardian: An experimental system for intelligent ICU monitoring. In Symposium on Computer Applications in Medical Care, Washington, DC, 1994.
14. B. Hayes-Roth, R. Washington, D. Ash, R. Hewett, A. Collinot, A. Vina, and A. Seiver. Guardian: A prototype intelligent agent for intensive-care monitoring. Journal of AI in Medicine, 4:165-185, 1992.
15. I. Kohane and I. Haimowitz. Hypothesis-driven data abstraction. In Symposium on Computer Applications in Medical Care, Washington, DC, 1993.
16. I. S. Kohane. Temporal reasoning in medical expert systems. In R. Salamon, B. Blum, and M. Jørgensen, editors, MEDINFO 86: Proceedings of the Fifth Conference on Medical Informatics, pages 170-174, Washington, Oct. 1986. North-Holland.
17. I. S. Kohane. Temporal reasoning in medical expert systems. TR 389, Massachusetts Institute of Technology, Laboratory for Computer Science, 545 Technology Square, Cambridge, MA, 02139, Apr. 1987.
18. I. S. Kohane and I. J. Haimowitz. Encoding patterns of growth to automate detection and diagnosis of abnormal growth patterns. Pediatric Research, 33:119A, 1993.
19. R. Moore, P. Lindenfilzer, L. B. Hawkinson, and B. Matthews. Process control with the g2 real-time expert system. In IEA/AIE '88: Proceedings of the First International Conference on Industrial and Engineering Applications of Artificial Intelligence and Expert Systems, volume 1, pages 492-497, Tullahoma, TN, June 1988. ACM.
20. S. M. Ornstein, D. R. Garr, R. G. Jenkins, P. F. Rust, and A. Arnon. Computer-generated physician and patient reminders. Journal of Family Practice, 32:82-90, 1991.
21. P. A. Porras and P. G. Neumann. Emerald: Event monitoring enabling responses to anomalous live disturbances. In Proceedings of the Twentieth National Information Systems Security Conference, Oct. 1997.
22. D. M. Rind, C. Safran, R. S. Phillips, W. V. Slack, D. R. Calkins, T. L. Delbanco, and H. L. Bleich. The effect of computer-based reminders on the management of hospitalized patients with worsening renal function. In P. Claytons, editor, Proceedings Symposium Computer Applications in Medical Care, pages 28-32, Washington, DC, 1991. McGraw-Hill.
23. D. M. Rind, C. Safran, R. S. Phillips, Q. Wang, D. R. Calkins, T. L. Delbanco, H. L. Bleich, and W. V. Slack. Effect of computer-based alerts on the treatment and outcomes of hospitalized patients. Archives of Internal Medicine, 154:1511-1517, 1994.
24. Y. Shahar. A Knowledge-Based Method for Temporal Abstraction of Clinical Data. PhD thesis, Stanford University, Stanford, CA, 1994. Available as Computer Science Department report CS-TR-94-1529.
25. H. Shrobe, J. Doyle, and P. Szolovits. Active trust management for autonomous adaptive survivable systems. Technical report, Massachusetts Institute of Technology, Artificial Intelligence Laboratory, 2000.
26. C. L. Tsien. TrendFinder: Automated Detection of Alarmable Trends. PhD thesis, Massachusetts Institute of Technology, Cambridge, Massachusetts, April 2000.
27. A. Valdes and K. Skinner. Adaptive, model-based monitoring for cyber attack detection. In Recent Advances in Intrusion Detection (RAID 2000), Toulouse, France, Oct. 2000.
28. M. P. Wellman and J. Doyle. Preferential semantics for goals. In Proceedings of the National Conference on Artificial Intelligence, pages 698-703, 1991.
29. M. P. Wellman and J. Doyle. Modular utility representation for decision-theoretic planning. In Proceedings of the First International Conference on AI Planning Systems, 1992.