Massachusetts Institute Of Technology Lincoln Laboratory Research Articles

States of Linear Systems, Automata, and Marriage : A Tribute to Rudolf Kalman [Historical Perspectives

During my time as a Ph.D. student in mathematics at the Massachusetts Institute of Technology (MIT), around 1962 or 1963, the authors of a book on control theory [1] introduced me to two researchers at MIT's Lincoln Laboratory, Michael Athanassiades and Peter Falb, who were writing a book on mathematical control theory. They, in turn, provided me with a draft of their book in progress and introduced me to the work of Rudolf Kalman. I read their draft with great interest not only for its intrinsic merit but also because I had been inspired by Norbert Wiener's Cybernetics and studied the Wiener-Hopf filter (and been a student of Wiener's at MIT for a while). Moreover, Kalman's stress on current state rather than the infinite past history of the system whose behavior was being extrapolated chimed with another of my interests, namely automata theory. There the concept of state was paramount-but in the world of sets and functions rather than vector spaces and linear transformations.

Hybrid Intrusion Detection with Weighted Signature Generation over Anomalous Internet Episodes

This paper reports the design principles and evaluation results of a new experimental hybrid intrusion detection system (HIDS). This hybrid system combines the advantages of low false-positive rate of signature-based intrusion detection system (IDS) and the ability of anomaly detection system (ADS) to detect novel unknown attacks. By mining anomalous traffic episodes from Internet connections, we build an ADS that detects anomalies beyond the capabilities of signature-based SNORT or Bro systems. A weighted signature generation scheme is developed to integrate ADS with SNORT by extracting signatures from anomalies detected. HIDS extracts signatures from the output of ADS and adds them into the SNORT signature database for fast and accurate intrusion detection. By testing our HIDS scheme over real-life Internet trace data mixed with 10 days of Massachusetts Institute of Technology/Lincoln Laboratory (MIT/LL) attack data set, our experimental results show a 60 percent detection rate of the HIDS, compared with 30 percent and 22 percent in using the SNORT and Bro systems, respectively. This sharp increase in detection rate is obtained with less than 3 percent false alarms. The signatures generated by ADS upgrade the SNORT performance by 33 percent. The HIDS approach proves the vitality of detecting intrusions and anomalies, simultaneously, by automated data mining and signature generation over Internet connection episodes

IFORS' Operational Research Hall of Fame Jay Wright Forrester

IFORS' Operational Research Hall of Fame Jay Wright Forrester