Showing 1–2 of 2 results for author: Eresheim, S

Towards Resilient Artificial Intelligence: Survey and Research Issues

Authors: Oliver Eigner, Sebastian Eresheim, Peter Kieseberg, Lukas Daniel Klausner, Martin Pirker, Torsten Priebe, Simon Tjoa, Fiammetta Marulli, Francesco Mercaldo

Abstract: Artificial intelligence (AI) systems are becoming critical components of today's IT landscapes. Their resilience against attacks and other environmental influences needs to be ensured just like for other IT assets. Considering the particular nature of AI, and machine learning (ML) in particular, this paper provides an overview of the emerging field of resilient AI and presents research issues the… ▽ More Artificial intelligence (AI) systems are becoming critical components of today's IT landscapes. Their resilience against attacks and other environmental influences needs to be ensured just like for other IT assets. Considering the particular nature of AI, and machine learning (ML) in particular, this paper provides an overview of the emerging field of resilient AI and presents research issues the authors identify as potential future work. △ Less

Submitted 18 September, 2021; originally announced September 2021.

Comments: 7 pages, 1 figure

Journal ref: Proceedings of the 2021 IEEE International Conference on Cyber Security and Resilience (CSR 2021), 2021, 536-542

Anomaly Detection Support Using Process Classification

Authors: Sebastian Eresheim, Lukas Daniel Klausner, Patrick Kochberger

Abstract: Anomaly detection systems need to consider a lot of information when scanning for anomalies. One example is the context of the process in which an anomaly might occur, because anomalies for one process might not be anomalies for a different one. Therefore data -- such as system events -- need to be assigned to the program they originate from. This paper investigates whether it is possible to infer… ▽ More Anomaly detection systems need to consider a lot of information when scanning for anomalies. One example is the context of the process in which an anomaly might occur, because anomalies for one process might not be anomalies for a different one. Therefore data -- such as system events -- need to be assigned to the program they originate from. This paper investigates whether it is possible to infer from a list of system events the program whose behavior caused the occurrence of these system events. To that end, we model transition probabilities between non-equivalent events and apply the $k$-nearest neighbors algorithm. This system is evaluated on non-malicious, real-world data using four different evaluation scores. Our results suggest that the approach proposed in this paper is capable of correctly inferring program names from system events. △ Less

Submitted 13 January, 2021; originally announced January 2021.

Comments: 14 pages, 6 figures

Journal ref: Proceedings of the 5th International Conference on Software Security and Assurance (ICSSA 2019), 2019, 27-40