Graphical Event Model Learning and Verification for Security Assessment

Antakly, Dimitri; Delahaye, Benoît; Leray, Philippe

doi:10.1007/978-3-030-22999-3_22

Cited by 2 publications

(3 citation statements)

References 4 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In this paper we proposed an algorithm for Multi Task Learning with Timescale Graphical Event Models. This algorithm, MTL Forward-Backward search, is an adaptation of the one proposed for Bayesian networks by [9] that also combines the efficient TGEM structure learning method proposed by [6] and the TGEM distance recently proposed in [1]. In this preliminary work, we also illustrated this algorithm with a simple toy example in order to give the intuition of its interest.…”

Section: Resultsmentioning

confidence: 99%

See 1 more Smart Citation

Multi-task Transfer Learning for Timescale Graphical Event Models

Monvoisin

Leray

2019

Lecture Notes in Computer Science

Self Cite

View full text Add to dashboard Cite

Graphical Event Models (GEMs) can approximate any smooth multivariate temporal point processes and can be used for capturing the dynamics of events occurring in continuous time for applications with event logs like web logs or gene expression data. In this paper, we propose a multi-task transfer learning algorithm for Timescale GEMs (TGEMs): the aim is to learn the set of k models given k corresponding datasets from k distinct but related tasks. The goal of our algorithm is to find the set of models with the maximal posterior probability. The procedure encourages the learned structures to become similar and simultaneously modifies the structures in order to avoid local minima. Our algorithm is inspired from an universal consistent algorithm for TGEM learning that retrieves both qualitative and quantitative dependencies from event logs. We show on a toy example that our algorithm could help to learn related tasks even with limited data.

show abstract

Section: Resultsmentioning

confidence: 99%

“…In order to estimate the distance between two RTGEMs, Antakly and al. [1] have proposed an extension of the usual Structural Hamming Distance. The distance between two RTGEMs M 1 = ((L, E 1 ), T 1 ) and M 2 = ((L, E 2 ), T 2 ) with the same set of labels, is defined by:…”

Section: Distance Between Two Rtgemsmentioning

confidence: 99%

Multi-task Transfer Learning for Timescale Graphical Event Models

Monvoisin

Leray

2019

Lecture Notes in Computer Science

Self Cite

View full text Add to dashboard Cite

show abstract

“…To the best of my knowledge, TGEMs are so far only theoretically covered in literature (Gunawardana and Meek 2016;Antakly, Delahaye, and Leray 2019;Monvoisin and Leray 2019) and neither synthetic nor real-world data have been modeled yet with TGEMs. Moreover, a relevant question -the choice of the default horizon -has not received any dedication.…”

Section: Methodsmentioning

confidence: 99%

Learnability of Timescale Graphical Event Models

Behrendt¹

2020

Preprint

View full text Add to dashboard Cite

This technical report tries to fill a gap in current literature on Timescale Graphical Event Models. I propose and evaluate different heuristics to determine hyper-parameters during the structure learning algorithm and refine an existing distance measure. A comprehensive benchmark on synthetic data will be conducted allowing conclusions about the applicability of the different heuristics. Graphical Event ModelsThis chapter introduces the class Graphical Event Models and in particular Timescale Graphical Event Models (Gunawardana and Meek 2016). After a reminder of the general framework and its notation, I will recap the structure learning algorithm and discuss different heuristics to choose hyper-parameters. Further, I briefly explain how to generate synthetic data. Finally, I propose a refined distance measure to evaluate how similar two Timescale Graphical Event Models are. For the sake of consistency, definitions and notations are adopted from the original work of Gunawardana and Meek (2016). Event streams and their temporal dynamics can be represented as a multivariate temporal point process and the literature offers several advanced methods such as Continuous Time Bayesian Networks (Nodelman et al. 2002), Poisson Networks (Rajaram, Graepel, and Herbrich 2005), Conjoint Piecewise-Constant Conditional Intensity Models (Parikh, Gunawardana, and Meek 2012), or Multiplicative-Forest Point Processes (Weiss and Page 2013). They commonly share the concept of conditional intensity functions to express the rate at which a specific event occurs, conditioned on previous event occurrences.Graphical Event Models (GEMs) (Didelez 2008;Meek 2014;Gunawardana and Meek 2016) provided a framework that generalizes before-mentioned models. Moreover, Gunawardana and Meek (2016) showed that GEMS can universally approximate any smooth multivariate temporal point process. GEMs provide a compact graphical representation of such process where different events are represented as nodes and an edge from node A to node B implies that the appearance of event A has some influence on the occurrence of event B. In addition to this qualitative information about temporal dependencies, GEMs also contain quantitative information about these dynamics in terms of conditional intensity functions. PreliminariesGunawardana and Meek (2016) denote a stream of events as (t, l) ∈ R + × L, each of which has a timestamp t > 0 and a label l taken from a finite label vocabulary L. This yields a sequence {(t 1 , l 1 ), . . . , (t i , l i ), . . . , (t n , l n )}, where t 0 = 0 < t i < t i+1 < t * and 1 ≤ i ≤ n − 1.Let further be x t * the sequence of events {(t i , l i ) : t i < t * } until time t * and h i the ith history h i = (t 1 , l 1 ), ..., (t i−1 , l i−1 ).

show abstract

Graphical Event Model Learning and Verification for Security Assessment

Cited by 2 publications

References 4 publications

Multi-task Transfer Learning for Timescale Graphical Event Models

Multi-task Transfer Learning for Timescale Graphical Event Models

Learnability of Timescale Graphical Event Models

Contact Info

Product

Resources

About