-
RL and Fingerprinting to Select Moving Target Defense Mechanisms for Zero-day Attacks in IoT
Authors:
Alberto Huertas Celdrán,
Pedro Miguel Sánchez Sánchez,
Jan von der Assen,
Timo Schenk,
Gérôme Bovet,
Gregorio Martínez Pérez,
Burkhard Stiller
Abstract:
Cybercriminals are moving towards zero-day attacks affecting resource-constrained devices such as single-board computers (SBC). Assuming that perfect security is unrealistic, Moving Target Defense (MTD) is a promising approach to mitigate attacks by dynamically altering target attack surfaces. Still, selecting suitable MTD techniques for zero-day attacks is an open challenge. Reinforcement Learnin…
▽ More
Cybercriminals are moving towards zero-day attacks affecting resource-constrained devices such as single-board computers (SBC). Assuming that perfect security is unrealistic, Moving Target Defense (MTD) is a promising approach to mitigate attacks by dynamically altering target attack surfaces. Still, selecting suitable MTD techniques for zero-day attacks is an open challenge. Reinforcement Learning (RL) could be an effective approach to optimize the MTD selection through trial and error, but the literature fails when i) evaluating the performance of RL and MTD solutions in real-world scenarios, ii) studying whether behavioral fingerprinting is suitable for representing SBC's states, and iii) calculating the consumption of resources in SBC. To improve these limitations, the work at hand proposes an online RL-based framework to learn the correct MTD mechanisms mitigating heterogeneous zero-day attacks in SBC. The framework considers behavioral fingerprinting to represent SBCs' states and RL to learn MTD techniques that mitigate each malicious state. It has been deployed on a real IoT crowdsensing scenario with a Raspberry Pi acting as a spectrum sensor. More in detail, the Raspberry Pi has been infected with different samples of command and control malware, rootkits, and ransomware to later select between four existing MTD techniques. A set of experiments demonstrated the suitability of the framework to learn proper MTD techniques mitigating all attacks (except a harmfulness rootkit) while consuming <1 MB of storage and utilizing <55% CPU and <80% RAM.
△ Less
Submitted 30 December, 2022;
originally announced December 2022.
-
Internal stresses analysis on welded joint in Grade 91 steel under creep test: synchrotron DRX tests and modelling
Authors:
Solenne Collomb Xiaolei Chen,
Jean-Philippe Tinnes,
Thomas Schenk,
Olivier Ferry,
Tsareva Svetlana,
Abdelkrim Redjaïmia,
Alain Jacques
Abstract:
The analysis and understanding of creep damage of Grade 91 steel welded joints is an important topic in the energy industry. Creep tests on welded joints were carried out at 600$^{\circ}$C, 100MPa and then interrupted at 0%, 10%, 30%, 50%, 80% of the expected life and after failure. Creep damage is characterised by cavity bands located exclusively in the core of the sample in the InterCritical Hea…
▽ More
The analysis and understanding of creep damage of Grade 91 steel welded joints is an important topic in the energy industry. Creep tests on welded joints were carried out at 600$^{\circ}$C, 100MPa and then interrupted at 0%, 10%, 30%, 50%, 80% of the expected life and after failure. Creep damage is characterised by cavity bands located exclusively in the core of the sample in the InterCritical Heat Affected Zone (ICHAZ). These samples were tested using \textit{in situ} synchrotron XRD along the welded joint under creep conditions for the different creep life time. The experimental results show a significant strain evolution and creep damage characteristic on the welded joint, with a local maximum at the Heat Affected Zone (HAZ). Following this, a finite element creep strain analysis was performed for comparison with the experimental results.
△ Less
Submitted 23 November, 2022;
originally announced November 2022.
-
Studying the Robustness of Anti-adversarial Federated Learning Models Detecting Cyberattacks in IoT Spectrum Sensors
Authors:
Pedro Miguel Sánchez Sánchez,
Alberto Huertas Celdrán,
Timo Schenk,
Adrian Lars Benjamin Iten,
Gérôme Bovet,
Gregorio Martínez Pérez,
Burkhard Stiller
Abstract:
Device fingerprinting combined with Machine and Deep Learning (ML/DL) report promising performance when detecting cyberattacks targeting data managed by resource-constrained spectrum sensors. However, the amount of data needed to train models and the privacy concerns of such scenarios limit the applicability of centralized ML/DL-based approaches. Federated learning (FL) addresses these limitations…
▽ More
Device fingerprinting combined with Machine and Deep Learning (ML/DL) report promising performance when detecting cyberattacks targeting data managed by resource-constrained spectrum sensors. However, the amount of data needed to train models and the privacy concerns of such scenarios limit the applicability of centralized ML/DL-based approaches. Federated learning (FL) addresses these limitations by creating federated and privacy-preserving models. However, FL is vulnerable to malicious participants, and the impact of adversarial attacks on federated models detecting spectrum sensing data falsification (SSDF) attacks on spectrum sensors has not been studied. To address this challenge, the first contribution of this work is the creation of a novel dataset suitable for FL and modeling the behavior (usage of CPU, memory, or file system, among others) of resource-constrained spectrum sensors affected by different SSDF attacks. The second contribution is a pool of experiments analyzing and comparing the robustness of federated models according to i) three families of spectrum sensors, ii) eight SSDF attacks, iii) four scenarios dealing with unsupervised (anomaly detection) and supervised (binary classification) federated models, iv) up to 33% of malicious participants implementing data and model poisoning attacks, and v) four aggregation functions acting as anti-adversarial mechanisms to increase the models robustness.
△ Less
Submitted 31 January, 2022;
originally announced February 2022.
-
ALPS: A Unified Framework for Modeling Time Series of Land Ice Changes
Authors:
Prashant Shekhar,
Beata Csatho,
Tony Schenk,
Carolyn Roberts,
Abani Patra
Abstract:
Modeling time series is a research focus in cryospheric sciences because of the complexity and multiscale nature of events of interest. Highly non-uniform sampling of measurements from different sensors with different levels of accuracy, as is typical for measurements of ice sheet elevations, makes the problem even more challenging. In this paper, we propose a spline-based approximation framework…
▽ More
Modeling time series is a research focus in cryospheric sciences because of the complexity and multiscale nature of events of interest. Highly non-uniform sampling of measurements from different sensors with different levels of accuracy, as is typical for measurements of ice sheet elevations, makes the problem even more challenging. In this paper, we propose a spline-based approximation framework (ALPS - Approximation by Localized Penalized Splines) for modeling time series of land ice changes. The localized support of the B-spline basis functions enable robustness to non-uniform sampling, a considerable improvement over other global and piecewise local models. With features like, discrete-coordinate-difference-based penalization and two-level outlier detection, ALPS further guarantees the stability and quality of approximations. ALPS incorporates rigorous model uncertainty estimates with all approximations. As demonstrated by examples, ALPS performs well for a variety of data sets, including time series of ice sheet thickness, elevation, velocity, and terminus locations. The robust estimation of time series and their derivatives facilitates new applications, such as the reconstruction of high-resolution elevation change records by fusing sparsely sampled time series of ice sheet thickness changes with modeled firn thickness changes, and the analysis of the relationship between different outlet glacier observations to gain new insight into processes and forcing.
△ Less
Submitted 9 July, 2020;
originally announced July 2020.
-
Effect of dopant ordering on the stability of ferroelectric hafnia
Authors:
Sangita Dutta,
Hugo Aramberri,
Tony Schenk,
Jorge Íñiguez
Abstract:
Films of all-important compound hafnia (HfO2) can be prepared in an orthorhombic ferroelectric (FE) state that is ideal for applications, e.g. in memories or negative-capacitance field-effect transistors. The origin of this FE state remains a mystery, though, as none of the proposed mechanisms for its stabilization -- from surface and size effects to formation kinetics -- is fully convincing. Inte…
▽ More
Films of all-important compound hafnia (HfO2) can be prepared in an orthorhombic ferroelectric (FE) state that is ideal for applications, e.g. in memories or negative-capacitance field-effect transistors. The origin of this FE state remains a mystery, though, as none of the proposed mechanisms for its stabilization -- from surface and size effects to formation kinetics -- is fully convincing. Interestingly, it is known that do** HfO2 with various cations favors the occurrence of the FE polymorph; however, existing first-principles works suggest that do** by itself is not sufficient to stabilize the polar phase over the usual non-polar monoclinic ground state. Here we use first-principles methods to reexamine this question. We consider two representative isovalent substitutional dopants, Si and Zr, and study their preferred arrangement within the HfO2 lattice. Our results reveal that small atoms like Si can adopt very stable configurations (forming layers within specific crystallographic planes) in the FE orthorhombic phase of HfO2, but comparatively less so in the non-polar monoclinic one. Further, we find that, at low concentrations, such a dopant ordering yields a FE ground state, the usual paraelectric phase becoming a higher-energy metastable polymorph. We discuss the implications of our findings, which constitute a definite step forward towards understanding ferroelectricity in HfO2.
△ Less
Submitted 7 February, 2020;
originally announced February 2020.
-
Machine-learned epidemiology: real-time detection of foodborne illness at scale
Authors:
Adam Sadilek,
Stephanie Caty,
Lauren DiPrete,
Raed Mansour,
Tom Schenk Jr,
Mark Bergtholdt,
Ashish Jha,
Prem Ramaswami,
Evgeniy Gabrilovich
Abstract:
Machine learning has become an increasingly powerful tool for solving complex problems, and its application in public health has been underutilized. The objective of this study is to test the efficacy of a machine-learned model of foodborne illness detection in a real-world setting. To this end, we built FINDER, a machine-learned model for real-time detection of foodborne illness using anonymous a…
▽ More
Machine learning has become an increasingly powerful tool for solving complex problems, and its application in public health has been underutilized. The objective of this study is to test the efficacy of a machine-learned model of foodborne illness detection in a real-world setting. To this end, we built FINDER, a machine-learned model for real-time detection of foodborne illness using anonymous and aggregated web search and location data. We computed the fraction of people who visited a particular restaurant and later searched for terms indicative of food poisoning to identify potentially unsafe restaurants. We used this information to focus restaurant inspections in two cities and demonstrated that FINDER improves the accuracy of health inspections; restaurants identified by FINDER are 3.1 times as likely to be deemed unsafe during the inspection as restaurants identified by existing methods. Additionally, FINDER enables us to ascertain previously intractable epidemiological information, for example, in 38% of cases the restaurant potentially causing food poisoning was not the last one visited, which may explain the lower precision of complaint-based inspections. We found that FINDER is able to reliably identify restaurants that have an active lapse in food safety, allowing for implementation of corrective actions that would prevent the potential spread of foodborne illness.
△ Less
Submitted 4 December, 2018;
originally announced December 2018.
-
Atomic Structure of Domain and Interphase Boundaries in Ferroelectric HfO$_2$
Authors:
Everett D. Grimley,
Tony Schenk,
Thomas Mikolajick,
Uwe Schroeder,
James M. LeBeau
Abstract:
Though the electrical responses of the various polymorphs found in ferroelectric polycrystalline thin film HfO$_2$ are now well characterized, little is currently understood of this novel material's grain sub-structure. In particular, the formation of domain and phase boundaries requires investigation to better understand phase stabilization, switching, and interconversion. Here, we apply scanning…
▽ More
Though the electrical responses of the various polymorphs found in ferroelectric polycrystalline thin film HfO$_2$ are now well characterized, little is currently understood of this novel material's grain sub-structure. In particular, the formation of domain and phase boundaries requires investigation to better understand phase stabilization, switching, and interconversion. Here, we apply scanning transmission electron microscopy to investigate the atomic structure of boundaries in these materials. In particular, we find orthorhombic/orthorhombic domain walls and coherent orthorhombic/monoclinic interphase boundaries formed throughout individual grains. The results inform how interphase boundaries can impose strain conditions that may be key to phase stabilization. Moreover, the atomic structure near interphase boundary walls suggests potential for their mobility under bias, which has been speculated to occur in perovskite morphotropic phase boundary systems by mechanisms similar to domain boundary motion.
△ Less
Submitted 23 September, 2017;
originally announced September 2017.
-
Probing the dynamics of quasicrystal growth using synchrotron live imaging
Authors:
Henri Nguyen-Thi,
Joseph Gastaldi,
Thomas Schenk,
Guillaume Reinhart,
Nathalie Mangelinck-Noel,
Viviana Cristiglio,
Bernard Billia,
Benjamin Grushko,
Jürgen Härtwig,
Holger Klein,
Jose Baruchel
Abstract:
The dynamics of quasicrystal growth remains an unsolved problem in condensed matter. By means of synchrotron live imaging, facetted growth proceeding by the tangential motion of ledges at the solid-melt interface is clearly evidenced all along the solidification of icosahedral AlPdMn quasicrystals. The effect of interface kinetics is significant so that nucleation and free growth of new facetted…
▽ More
The dynamics of quasicrystal growth remains an unsolved problem in condensed matter. By means of synchrotron live imaging, facetted growth proceeding by the tangential motion of ledges at the solid-melt interface is clearly evidenced all along the solidification of icosahedral AlPdMn quasicrystals. The effect of interface kinetics is significant so that nucleation and free growth of new facetted grains occur in the melt when the solidification rate is increased. The evolution of these grains is explained in details, which reveals the crucial role of aluminum rejection, both in the poisoning of grain growth and driving fluid flow.
△ Less
Submitted 6 July, 2005; v1 submitted 27 April, 2005;
originally announced April 2005.