Network anomaly analysis is an emerging subtopic of network security. Network anomaly
refers to the unusual behavior of network devices or suspicious network status. A number of …

Many of the challenges associated with cybersecurity operations are also ripe opportunities
for the application of human-machine teaming. Advances in cognitive science, artificial …

Systems and methods for improving analytics in a distrib uted network are described herein.
An example system includes at least one processor, an analytics module, and a security …

Methods and systems for deception using distributed threat detection are provided.
Exemplary methods by an enforcement point, the enforcement point communicatively …

Network traffic log data is a key data source for forensic analysis of cybersecurity incidents.
Packet Captures (PCAPs) are the raw information directly gathered from the network device …

In this paper, we present our design study on develo** an interactive visual firewall log
analysis system in collaboration with an IT service provider. We describe the human …

For the protection of critical infrastructures against complex virus attacks, automated network
traffic analysis and deep packet inspection are unavoidable. However, even with the use of …

Methods, systems, and media for producing a firewall rule set are provided herein.
Exemplary methods may include receiving a declarative policy associated with a computer …

The appearance of the smart houses, buildings, and cities has defined new attack scenarios
targeting industrial information systems. The paper suggests a visualization-driven approach …

Designing innovative approaches to detect intrusive network activities is considered as one
of the most significant research topics in network security. Various computational methods …