Search

Modeling cyber threats, such as the computer malicious software (malware) propagation dynamics in cyberspace, is an important research problem because models can deepen our understanding of dynamical cyber threats. In this paper, we study the statistical modeling of the macro-level evolution of dynamical cyber attacks. Specifically, we propose a Bayesian structural time series approach for modeling the computer malware propagation dynamics in cyberspace. Our model not only possesses the parsimony property (i.e. using few model parameters) but also can provide the predictive distribution of the dynamics by accommodating uncertainty. Our simulation study shows that the proposed model can fit and predict the computer malware propagation dynamics accurately, without requiring to know the information about the underlying attack-defense interaction mechanism and the underlying network topology. We use the model to study the propagation of two particular kinds of computer malware, namely the Conficker and Code Red worms, and show that our model has very satisfactory fitting and prediction accuracies.

Modeling cyber risks has been an important but challenging task in the domain of cyber security. It is mainly because of the high dimensionality and heavy tails of risk patterns. Those obstacles have hindered the development of statistical modeling of the multivariate cyber risks. In this work, we propose a novel approach for modeling the multivariate cyber risks which relies on the deep learning and extreme value theory. The proposed model not only enjoys the high accurate point predictions via deep learning but also can provide the satisfactory high quantile prediction via extreme value theory. The simulation study shows that the proposed model can model the multivariate cyber risks very well and provide satisfactory prediction performances. The empirical evidence based on real honeypot attack data also shows that the proposed model has very satisfactory prediction performances., 25 pages

The computation of the signature of a complex system is often challenging, as it may involve a large number of components and a complex architecture. In this study, we propose a novel approach to computing the signature of a system consisting of subsystems with shared components. The proposed approach relies on a new concept called decomposed survival signatures. This new concept can be efficiently used to compute the signature of a modular system with an arbitrary organizing structure and to provide explicit formulas for computation. Applications in cyber systems, transportation systems, and branched oil pipeline systems are highlighted.

In this paper we provide some sufficient conditions to stochastically compare linear combinations of independent random variables. The main results extend those given in Proschan (1965), Ma (1998), Zhao et al. (2011), and Yu (2011). In particular, we propose a new sufficient condition to compare the peakedness of linear combinations of independent random variables which may have heavy-tailed properties.

Let R"n be the range of a random sample X"1,...,X"n of exponential random variables with hazard rate @l. Let S"n be the range of another collection Y"1,...,Y"n of mutually independent exponential random variables with hazard rates @l"1,...,@l"n whose average is @l. Finally, let r and s denote the reversed hazard rates of R"n and S"n, respectively. It is shown here that the mapping [email protected]?s(t)/r(t) is increasing on (0,~) and that as a result, R"n=X"("n")-X"("1") is smaller than S"n=Y"("n")-Y"("1") in the likelihood ratio ordering as well as in the dispersive ordering. As a further consequence of this fact, X"("n") is seen to be more stochastically increasing in X"("1") than Y"("n") is in Y"("1"). In other words, the pair (X"("1"),X"("n")) is more dependent than the pair (Y"("1"),Y"("n")) in the monotone regression dependence ordering. The latter finding extends readily to the more general context where X"1,...,X"n form a random sample from a continuous distribution while Y"1,...,Y"n are mutually independent lifetimes with proportional hazard rates.

A parallel system with heterogeneous exponential component lifetimes is shown to be more skewed (according to the convex transform order) than the system with independent and identically distributed exponential components. As a consequence, equivalent conditions for comparing the variabilities of the largest order statistics from heterogeneous and homogeneous exponential samples in the sense of the dispersive order and the right-spread order are established. A sufficient condition is also given for the proportional hazard rate model.

A parallel system with heterogeneous exponential component lifetimes is shown to be more skewed (according to the convex transform order) than the system with independent and identically distributed exponential components. As a consequence, equivalent conditions for comparing the variabilities of the largest order statistics from heterogeneous and homogeneous exponential samples in the sense of the dispersive order and the right-spread order are established. A sufficient condition is also given for the proportional hazard rate model.

In this paper, some ordering properties of convolutions of heterogeneous Bernoulli random variables are discussed. It is shown that, under some suitable conditions, the likelihood ratio order and the reversed hazard rate order hold between convolutions of two heterogeneous Bernoulli sequences. The results established here extend and strengthen the previous results of Pledger and Proschan (1971) and Boland, Singh and Cukic (2002).

Kochar and Xu (2009) proved that a parallel system with heterogeneous exponential component lifetimes is more skewed (according to the convex transform order) than the system with independent and identically distributed exponential components. In this paper we extend this study to the general k-out-of-n systems for the case when there are only two types of component in the system. An open problem proposed in Pǎltǎnea (2008) is partially solved.