Capitanio et al provide a succinct review of digital cytopathology technology with particularly good overviews of scanner focusing methodologies as well as explanations of deep focusing techniques. The aim of this letter to the editor is to briefly comment and expand on some of the information provided by these authors.
Host-based Intrusion Detection Systems
(HIDS) automatically detect events that indicate compromise by adversarial applications. HIDS are generally formulated as analyses of sequences of system events such as bash commands or system calls.
Anomaly-based
approaches to HIDS leverage models of normal (aka baseline) system behavior to detect and report abnormal events, and have the advantage of being able to detect novel attacks. In this paper we develop a new method for anomaly-based HIDS using deep learning predictions of sequence-to-sequence behavior in system calls. Our proposed method, called the
ALAD
algorithm, aggregates predictions at the
application
level to detect anomalies. We investigate the use of several deep learning architectures, including WaveNet and several recurrent networks. We show that
ALAD
empowered with deep learning significantly outperforms previous approaches. We train and evaluate our models using an existing dataset, ADFA-LD, and a new dataset of our own construction, PLAID. As deep learning models are black box in nature we use an alternate approach, allotaxonographs, to characterize and understand differences in baseline vs.~attack sequences in HIDS datasets such as PLAID.
scite is a Brooklyn-based organization that helps researchers better discover and understand research articles through Smart Citations–citations that display the context of the citation and describe whether the article provides supporting or contrasting evidence. scite is used by students and researchers from around the world and is funded in part by the National Science Foundation and the National Institute on Drug Abuse of the National Institutes of Health.