公开(公告)号：US20090190492A1

公开(公告)日：2009-07-30

申请号：US12362055

申请日：2009-01-29

申请人： Syed Ali Khayam ,  Shirish Karande ,  Hayder Radha

发明人： Syed Ali Khayam ,  Shirish Karande ,  Hayder Radha

IPC分类号： H04L12/26

CPC分类号： H04L1/0072

摘要： A method is provided for estimating the header of a data packet in a wireless communication system. The method includes: maintaining a list of data packets received without an error at a receiver; receiving at the receiver a corrupt data packet having errors in its header; computing a likelihood score for the header of the corrupt data packet in relation to each entry in the list of data packets; and selecting an entry having the highest likelihood score as an estimated header for the corrupt data packet.

摘要翻译： 提供了一种用于估计无线通信系统中的数据分组的报头的方法。 该方法包括：在接收机处保持接收到的数据分组的列表，而不发生错误; 在接收器处接收在其报头中具有错误的损坏数据分组; 计算关于数据分组列表中的每个条目的损坏数据分组的报头的似然分数; 以及选择具有最高似然分数的条目作为损坏的数据分组的估计头部。

公开(公告)号：US20090133123A1

公开(公告)日：2009-05-21

申请号：US11921330

申请日：2006-06-02

申请人： Hayder Radha ,  Syed Ali Khayam

发明人： Hayder Radha ,  Syed Ali Khayam

IPC分类号： G06F21/00 ,  G06G7/62 ,  G06F17/10

CPC分类号： H04L63/1416 ,  G06F21/577 ,  H04L63/145

摘要： A worm propagation modeling system for use with a mobile ad-hoc network (MANET) includes an infection detection module receiving temporal dynamics information relating to temporal dynamics of worm spread in the MANET and spatial dynamics information relating to spatiality of nodes in the MANET. The infection detection module detects infection in a network segment of the MANET based on the temporal dynamics information and the spatial dynamics information.

摘要翻译： 与移动自组织网络（MANET）一起使用的蠕虫传播建模系统包括感染检测模块，其接收与MANET中的蠕虫传播的时间动态有关的时间动力学信息，以及与MANET中的节点的空间性有关的空间动力学信息。 感染检测模块基于时间动力学信息和空间动力学信息检测MANET网段中的感染。

公开(公告)号：US08800036B2

公开(公告)日：2014-08-05

申请号：US12692165

申请日：2010-01-22

申请人： Syed Ali Khayam ,  Muhammad Qasim Ali

发明人： Syed Ali Khayam ,  Muhammad Qasim Ali

IPC分类号： H04L29/06

CPC分类号： H04L63/1425

摘要： The input characteristics of a real-time IDS change continuously with time therefore setting a rigid (time and behavior invariant) classification threshold limits the accuracy that the IDS can potentially achieve. A generic threshold tuning method and system is proposed which can adaptively tune the detection threshold of a real-time IDS in accordance with varying host and network behavior. The method and system perform statistical and information-theoretic analysis of network and host-based IDSs' anomaly based intrusions to reveal a consistent time correlation structure between benign activity periods which is used to predict future anomaly scores and to adapt an IDS' detection threshold accordingly.

摘要翻译： 实时IDS的输入特性随着时间的推移而不断变化，从而设置了一个刚性（时间和行为不变）分类阈值，限制了IDS可能实现的准确性。 提出了一种通用的阈值调整方法和系统，可以根据不同的主机和网络行为自适应地调整实时IDS的检测阈值。 该方法和系统对网络和基于主机的IDS异常入侵进行统计和信息理论分析，以揭示用于预测未来异常评分的良性活动期间之间的一致时间相关结构，并相应调整IDS检测阈值 。

公开(公告)号：US20110185422A1

公开(公告)日：2011-07-28

申请号：US12692165

申请日：2010-01-22

申请人： Syed Ali Khayam ,  Muhammad Qasim Ali

发明人： Syed Ali Khayam ,  Muhammad Qasim Ali

IPC分类号： G06F11/00

CPC分类号： H04L63/1425

摘要： The input characteristics of a real-time IDS change continuously with time therefore setting a rigid (time and behavior invariant) classification threshold limits the accuracy that the IDS can potentially achieve. A generic threshold tuning method and system is proposed which can adaptively tune the detection threshold of a real-time IDS in accordance with varying host and network behavior. The method and system perform statistical and information-theoretic analyses of network and host-based IDSs' anomaly based intrusions to reveal a consistent time correlation structure between benign activity periods which is used to predict future anomaly scores and to adapt an IDS' detection threshold accordingly.

摘要翻译： 实时IDS的输入特性随着时间的推移而不断变化，从而设置了一个刚性（时间和行为不变）分类阈值，限制了IDS可能实现的准确性。 提出了一种通用的阈值调整方法和系统，可以根据不同的主机和网络行为自适应地调整实时IDS的检测阈值。 该方法和系统对网络和基于主机的IDS异常入侵进行统计和信息理论分析，以揭示用于预测未来异常得分的良性活动期间之间的一致的时间相关结构，并相应调整IDS检测阈值 。