Anomaly detection

Anomalies within local network data traffic will be detected with ML methods, e.g. Graph Neural Networks (GNN).

Logo

Main partner/Developer Tool developer

Tool Link Link to website/github (URL) with more detailed information (optional)

Tool partners Non-owner organizations associated with the tool (partners/distributors)

Improved/Developed Tool Select if it is a new tool (developed) or an improved tool

Tool description A detailed description of the tool

An anomaly-based intrusion detection system (IDS) monitors various system events in order to detect security issues and classifying it as either normal or anomalous. For example, a Host IDS (HIDS) monitors Operating System events such as file access patterns to detect malicious activity while a Network IDS (NIDS) monitors network traffic to detect issues. Recent research in NIDS have mostly focused on anomaly-based systems, in particular on using various machine learning and deep learning techniques.

Technical toolchains Technical connection of tools with their supporting tools. Example: for running a specific tool, you need to run/install this other tool(s) (e.g., CHESS-FLA CHESS, MoMuT Enterprise Architect, etc)

Description of the improvements Description of the improvements and novelties added during VALU3S/Baseline

Anomalies within the local network data traffic will be detected with the usage of Graph Neural Networks (GNN).

Improvement date

New Improvements To be filled in the future (after VALU3S)

References Related papers, journals, articles, and so on

E-GraphSAGE: https://arxiv.org/abs/2103.16329
Nearest neighbour: https://arxiv.org/pdf/2205.07323.pdf
Benchmark datasets: https://www.unb.ca/cic/datasets/

Relationships with other web-repo artefacts

Related V&V Methods A tool could be based on several V&V methods.

Standards A method can be linked with standards.

Use cases Use cases where the tool has been used

Functional Toolchain Functional connection of tools for the implementation of a specific evaluation scenario/workflow. Example: the output of one tool can be used by the other tool(s) in order to obtain a different information (e.g., CIROS FERAL, MARVER >-> SRVT, etc)

Improvement Classification

Evaluation Criteria for Safety, Cybersecurity, and Privacy (SCP)

Evaluation Criteria for V&V Processes

Open source - Goals

open Source

Goals Tool goals

Contents

There are currently no items in this folder.