A Novel Approach to Intrusion Detection Using a Cognitively-Inspired Algorithm
Loading...
Files
Authors
Thomson, Robert
Cranford, Edward
Somers, Sterling
Lebiere, Christian
Issue Date
2024-01-03
Type
Conference presentations, papers, posters
Language
Keywords
cognitive model , Intrusion Detection , Salience , cybersecurity
Alternative Title
Abstract
We propose a novel algorithm for white-box intrusion detection using a cognitive model consistent with the principles of instance-based learning theory. Cognitive models inherit both mechanism and limitations from cognitive architectures implementing unified theories of human cognition. The mechanisms endow the models with powerful characteristics of human cognition, including robustness, generalization and adaptivity. Expanding upon previous research in malware identification and personalized deceptive signaling, the present paper presents a cognitive model able to achieve over 70% accuracy identifying anomalous (vs normal) traffic on the UNSW-NB15 dataset with only 8 features and using only one sample from each attack and 9 normal samples. Accuracy linearly increases to over 85% using up to 100x more samples. A cognitively-inspired salience algorithm then shows the relative impact of each feature driving correct vs incorrect classifications. Implications for integrating this algorithm with human operators are discussed.
Description
Citation
Thomson, Robert, Edward Cranford, Sterling Somers, and Christian Lebiere. "A novel approach to intrusion detection using a cognitively-inspired algorithm." Proceedings of the 57th Hawaii International Conference on System Sciences. (2024).
Publisher
HICSS