Visible to the public Anomaly Detection Using Persistent Homology

TitleAnomaly Detection Using Persistent Homology
Publication TypeConference Paper
Year of Publication2016
AuthorsBruillard, P., Nowak, K., Purvine, E.
Conference Name2016 Cybersecurity Symposium (CYBERSEC)
Date Publishedapr
Keywordsanomaly detection, anomaly detection algorithm, compositionality, cyber network, cybersecurity, detection algorithms, dynamic point cloud, Human Behavior, human factors, Indexes, IP networks, Metrics, persistent homology, Ports (Computers), pubcrawl, Resiliency, security of data, set theory, statistical analysis, summary statistics, Three-dimensional displays, Tools, vulnerability detection
Abstract

Many aspects of our daily lives now rely on computers, including communications, transportation, government, finance, medicine, and education. However, with increased dependence comes increased vulnerability. Therefore recognizing attacks quickly is critical. In this paper, we introduce a new anomaly detection algorithm based on persistent homology, a tool which computes summary statistics of a manifold. The idea is to represent a cyber network with a dynamic point cloud and compare the statistics over time. The robustness of persistent homology makes for a very strong comparison invariant.

DOI10.1109/CYBERSEC.2016.009
Citation Keybruillard_anomaly_2016