A Case-Based Reasoning Approach for the Cybersecurity Incident Recording and Resolution

2019 ◽  
Vol 29 (11n12) ◽  
pp. 1607-1627
Author(s):  
Raul Ceretta Nunes ◽  
Marcelo Colomé ◽  
Fabio André Barcelos ◽  
Marcelo Garbin ◽  
Gustavo Bathu Paulus ◽  
...  

Intelligent computing techniques have a paramount importance to the treatment of cybersecurity incidents. In such Artificial Intelligence (AI) context, while most of the algorithms explored in the cybersecurity domain aim to present solutions to intrusion detection problems, these algorithms seldom approach the correction procedures that are explored in the resolution of cybersecurity incident problems that already took place. In practice, knowledge regarding cybersecurity resolution data and procedures is being under-used in the development of intelligent cybersecurity systems, sometimes even lost and not used at all. In this context, this work proposes the Case-based Cybersecurity Incident Resolution System (CCIRS), a system that implements an approach to integrate case-based reasoning (CBR) techniques and the IODEF standard in order to retain concrete problem-solving experiences of cybersecurity incident resolution to be reused in the resolution of new incidents. Different types of experimental results so far obtained with the CCIRS show that information security knowledge can be retained with our approach in a reusable memory improving the resolution of new cybersecurity problems.

Vestnik MEI ◽  
2020 ◽  
Vol 5 (5) ◽  
pp. 132-139
Author(s):  
Ivan E. Kurilenko ◽  
◽  
Igor E. Nikonov ◽  

A method for solving the problem of classifying short-text messages in the form of sentences of customers uttered in talking via the telephone line of organizations is considered. To solve this problem, a classifier was developed, which is based on using a combination of two methods: a description of the subject area in the form of a hierarchy of entities and plausible reasoning based on the case-based reasoning approach, which is actively used in artificial intelligence systems. In solving various problems of artificial intelligence-based analysis of data, these methods have shown a high degree of efficiency, scalability, and independence from data structure. As part of using the case-based reasoning approach in the classifier, it is proposed to modify the TF-IDF (Term Frequency - Inverse Document Frequency) measure of assessing the text content taking into account known information about the distribution of documents by topics. The proposed modification makes it possible to improve the classification quality in comparison with classical measures, since it takes into account the information about the distribution of words not only in a separate document or topic, but in the entire database of cases. Experimental results are presented that confirm the effectiveness of the proposed metric and the developed classifier as applied to classification of customer sentences and providing them with the necessary information depending on the classification result. The developed text classification service prototype is used as part of the voice interaction module with the user in the objective of robotizing the telephone call routing system and making a shift from interaction between the user and system by means of buttons to their interaction through voice.


Author(s):  
Guanghsu A. Chang ◽  
Cheng-Chung Su ◽  
John W. Priest

Artificial intelligence (AI) approaches have been successfully applied to many fields. Among the numerous AI approaches, Case-Based Reasoning (CBR) is an approach that mainly focuses on the reuse of knowledge and experience. However, little work is done on applications of CBR to improve assembly part design. Similarity measures and the weight of different features are crucial in determining the accuracy of retrieving cases from the case base. To develop the weight of part features and retrieve a similar part design, the research proposes using Genetic Algorithms (GAs) to learn the optimum feature weight and employing nearest-neighbor technique to measure the similarity of assembly part design. Early experimental results indicate that the similar part design is effectively retrieved by these similarity measures.


Author(s):  
Theodore Bardsz ◽  
Ibrahim Zeid

Abstract One of the most significant issues in applying case-based reasoning (CBR) to mechanical design is to integrate previously unrelated design plans towards the solution of a new design problem. The total design solution (the design plan structure) can be composed of both retrieved and dynamically generated design plans. The retrieved design plans must be mapped to fit the new design context, and the entire design plan structure must be evaluated. An architecture utilizing opportunistic problem solving in a blackboard environment is used to map and evaluate the design plan structure effectively and successfuly. The architecture has several assets when integrated into a CBR environment. First, the maximum amount of information related to the design is generated before any of the mapping problems are addressed. Second, mapping is preformed as just another action toward the evaluation of the design plan. Lastly, the architecture supports the inclusion of memory elements from the knowledge base in the design plan structure. The architecture is implemented using the GBB system. The architecture is part of a newly developed CBR System called DEJAVU. The paper describes DEJAVU and the architecture. An example is also included to illustrate the use of DEJAVU to solve engineering design problems.


Author(s):  
Durga Prasad Roy ◽  
Baisakhi Chakraborty

Case-Based Reasoning (CBR) arose out of research into cognitive science, most prominently that of Roger Schank and his students at Yale University, during the period 1977–1993. CBR may be defined as a model of reasoning that incorporates problem solving, understanding, and learning, and integrates all of them with memory processes. It focuses on the human problem solving approach such as how people learn new skills and generates solutions about new situations based on their past experience. Similar mechanisms to humans who intelligently adapt their experience for learning, CBR replicates the processes by considering experiences as a set of old cases and problems to be solved as new cases. To arrive at the conclusions, it uses four types of processes, which are retrieve, reuse, revise, and retain. These processes involve some basic tasks such as clustering and classification of cases, case selection and generation, case indexing and learning, measuring case similarity, case retrieval and inference, reasoning, rule adaptation, and mining to generate the solutions. This chapter provides the basic idea of case-based reasoning and a few typical applications. The chapter, which is unique in character, will be useful to researchers in computer science, electrical engineering, system science, and information technology. Researchers and practitioners in industry and R&D laboratories working in such fields as system design, control, pattern recognition, data mining, vision, and machine intelligence will benefit.


The focus of algorithmic design is to solve composite problems. Intelligent systems use intellectual concepts like evolutionary computation, artificial neural networks, fuzzy systems, and swarm intelligence to process natural intelligence models. Artificial intelligence is used as a part of intelligent systems to perform logic- and case-based reasoning. Systems like mechanical and electrical support systems are operated by utilizing Supervisory Control and Data Acquisition (SCADA) systems. These systems cannot accomplish their purpose, provided the control system deals with the reliability of it. In CPSs, dimensions of physical processes are taken by sensors and are processed in cyber subsystems to drive the actuators that affect the physical processors. CPSs are closed-loop systems. The adaptation and the prediction are the properties to be followed by the control strategies that are implemented in cyber subsystems. This chapter explores cyber physical control systems.


2001 ◽  
Vol 40 (01) ◽  
pp. 46-51 ◽  
Author(s):  
A. Palaudàries ◽  
E. Plaza ◽  
E. Armengol

AbstractWe present DIRAS, an application to support physicians in determining the risk of complications for individual diabetic patients. The risk pattern of each diabetic patient is obtained using a Case-based Reasoning method called LID. Case-based Reasoning is an Artificial Intelligence technique based on solving new situations according to past experiences. For each patient, the LID method determines the risk of each diabetic complication according to the risk of already diagnosed patients. In addition, LID builds a description that can be viewed as an explanation of the obtained risk.


Author(s):  
Julien Henriet

AI-Virtual Trainer is an educative system using Artificial Intelligence to propose varied lessons to trainers. The agents of this multi-agent system apply case-based reasoning to build solutions by analogy. However, as required by the field, Artificial Intelligence-Virtual Trainer never proposes the same lesson twice, whereas the same objective may be set many times consecutively. The adaptation process of Artificial Intelligence-Virtual Trainer delivers an ordered set of exercises adapted to the objectives and sub-objectives chosen by trainers. This process has been enriched by including the notion of distance between exercises: the proposed tasks are not only appropriate but are hierarchically ordered. With this new version of the system, students are guided towards their objectives via an underlying theme. Finally, the agents responsible for the different parts of lessons collaborate with each other according to a dedicated protocol and decision-making policy since no exercise must appear more than once in the same lesson. The results prove that Artificial Intelligence-Virtual Trainer, however perfectible, meets the requirements of this field.


Sign in / Sign up

Export Citation Format

Share Document