Directional Laplacian Centrality for Cyber Situational Awareness

08/10/2020
by   Sinan G. Aksoy, et al.
0

Cyber operations is drowning in diverse, high-volume, multi-source data. In order to get a full picture of current operations and identify malicious events and actors analysts must see through data generated by a mix of human activity and benign automated processes. Although many monitoring and alert systems exist, they typically use signature-based detection methods. We introduce a general method rooted in spectral graph theory to discover patterns and anomalies without a priori knowledge of signatures. We derive and propose a new graph-theoretic centrality measure based on the derivative of the graph Laplacian matrix in the direction of a vertex. While our proposed Directional Laplacian Centrality may be applied to any graph, we study its effectiveness in identifying important Internet Protocol addresses in network flow data. Using both real and synthetic network flow data, we conduct several experiments to test our measure's sensitivity to two types of injected attack profiles.

READ FULL TEXT

page 1

page 2

page 3

page 4

research
09/01/2022

MSGNN: A Spectral Graph Neural Network Based on a Novel Magnetic Signed Laplacian

Signed and directed networks are ubiquitous in real-world applications. ...
research
12/16/2021

A Heterogeneous Graph Learning Model for Cyber-Attack Detection

A cyber-attack is a malicious attempt by experienced hackers to breach t...
research
09/19/2019

Detecting malicious logins as graph anomalies

Authenticated lateral movement via compromised accounts is a common adve...
research
08/16/2017

A Generalised Directional Laplacian Distribution: Estimation, Mixture Models and Audio Source Separation

Directional or Circular statistics are pertaining to the analysis and in...
research
08/07/2020

A boosted outlier detection method based on the spectrum of the Laplacian matrix of a graph

This paper explores a new outlier detection algorithm based on the spect...
research
01/21/2018

How can we naturally order and organize graph Laplacian eigenvectors?

When attempting to develop wavelet transforms for graphs and networks, s...
research
06/19/2023

Cyber Key Terrain Identification Using Adjusted PageRank Centrality

The cyber terrain contains devices, network services, cyber personas, an...

Please sign up or login with your details

Forgot password? Click here to reset