Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Cyber Situation Awareness with Active Learning for Intrusion Detection   Intrusion detection has focused primarily on detecting cyberattacks at the
event-level. Since there is such a large volume of network data and attacks are
minimal, machine learning approaches have focused on improving accuracy and
reducing false positives, but this has frequently resulted in overfitting. In
addition, the volume of intrusion detection alerts is large and creates fatigue
in the human analyst who must review them. This research addresses the problems
associated with event-level intrusion detection and the large volumes of
intrusion alerts by applying active learning and cyber situation awareness.
This paper includes the results of two experiments using the UNSW-NB15 dataset.
The first experiment evaluated sampling approaches for querying the oracle, as
part of active learning. It then trained a Random Forest classifier using the
samples and evaluated its results. The second experiment applied cyber
situation awareness by aggregating the detection results of the first
experiment and calculating the probability that a computer system was part of a
cyberattack. This research showed that moving the perspective of event-level
alerts to the probability that a computer system was part of an attack improved
the accuracy of detection and reduced the volume of alerts that a human analyst
would need to review.

24
The categories of this paper are: dg-ga
23
The categories of this paper are: solv-int
35
The categories of this paper are: mtrl-th
20
The categories of this paper are: acc-phys
28
The categories of this paper are: alg-geom
3
The categories of this paper are: physics
29
The categories of this paper are: funct-an
36
The categories of this paper are: cmp-lg
25
The categories of this paper are: patt-sol
2
The categories of this paper are: math
8
The categories of this paper are: hep-ex
21
The categories of this paper are: adap-org
13
The categories of this paper are: quant-ph
4
The categories of this paper are: cond-mat
7
The categories of this paper are: hep-th
33
The categories of this paper are: plasm-ph