{ "access": { "embargo": { "active": false, "reason": null }, "files": "public", "record": "public", "status": "open" }, "created": "2019-11-29T17:07:37.889544+00:00", "custom_fields": {}, "deletion_status": { "is_deleted": false, "status": "P" }, "files": { "count": 1, "enabled": true, "entries": { "The Alan Turing Institute Data Study Group Final Report - Imperial, Los Alamos, Heilbronn.pdf": { "checksum": "md5:3cdd141fd10ca97240b29d1e56a39371", "ext": "pdf", "id": "b9ca2f2e-cc03-4bd1-a0de-da61f73d59cb", "key": "The Alan Turing Institute Data Study Group Final Report - Imperial, Los Alamos, Heilbronn.pdf", "metadata": null, "mimetype": "application/pdf", "size": 6952314 } }, "order": [], "total_bytes": 6952314 }, "id": "3558251", "is_draft": false, "is_published": true, "links": { "access": "https://zenodo.org/api/records/3558251/access", "access_links": "https://zenodo.org/api/records/3558251/access/links", "access_request": "https://zenodo.org/api/records/3558251/access/request", "access_users": "https://zenodo.org/api/records/3558251/access/users", "archive": "https://zenodo.org/api/records/3558251/files-archive", "archive_media": "https://zenodo.org/api/records/3558251/media-files-archive", "communities": "https://zenodo.org/api/records/3558251/communities", "communities-suggestions": "https://zenodo.org/api/records/3558251/communities-suggestions", "doi": "https://doi.org/10.5281/zenodo.3558251", "draft": "https://zenodo.org/api/records/3558251/draft", "files": "https://zenodo.org/api/records/3558251/files", "latest": "https://zenodo.org/api/records/3558251/versions/latest", "latest_html": "https://zenodo.org/records/3558251/latest", "media_files": "https://zenodo.org/api/records/3558251/media-files", "parent": "https://zenodo.org/api/records/3558250", "parent_doi": "https://zenodo.org/doi/10.5281/zenodo.3558250", "parent_html": "https://zenodo.org/records/3558250", "requests": "https://zenodo.org/api/records/3558251/requests", "reserve_doi": "https://zenodo.org/api/records/3558251/draft/pids/doi", "self": "https://zenodo.org/api/records/3558251", "self_doi": "https://zenodo.org/doi/10.5281/zenodo.3558251", "self_html": "https://zenodo.org/records/3558251", "self_iiif_manifest": "https://zenodo.org/api/iiif/record:3558251/manifest", "self_iiif_sequence": "https://zenodo.org/api/iiif/record:3558251/sequence/default", "versions": "https://zenodo.org/api/records/3558251/versions" }, "media_files": { "count": 0, "enabled": false, "entries": {}, "order": [], "total_bytes": 0 }, "metadata": { "creators": [ { "affiliations": [ { "name": "The Alan Turing Institute" } ], "person_or_org": { "family_name": "Data Study Group team", "name": "Data Study Group team", "type": "personal" } } ], "description": "
Data Study Groups are week-long events at The Alan Turing Institute bringing together some of the country’s top talent from data science, artificial intelligence, and wider fields, to analyse real-world data science challenges.
\n\nImperial College London, Los Alamos National Laboratory, Heilbronn Institute: Developing data science tools for improving enterprise cyber-security
\n\nThis Data Study Group (DSG) challenge aims to carry out a preliminary investigation of some statistical and machine learning tools for analysing certain types of cyber-relevant data sources. Specifically, we consider a unified repository released by Los Alamos National Laboratory (LANL) comprising both network flow records and process-level Windows service logs collected on the same enterprise computer network over a three-month period.
\n\nThree aspects tackled in this challenge include anomaly detection, data fusion, and visualisation. Within the DSG week, we have aimed to consider if fusion of the data sources can give a more coherent view of this network’s behaviour and what visualisations can be used to aid a prioritisation of of potential threats for analysts. Other explorations developed during this study group have been provided and the potential applications or limitations described. This report does not provide a ‘white paper’ on cyber-security tools, but rather aims to detail the methods attempted by different groups of participants in this DSG.
", "publication_date": "2019-11-29", "publisher": "Zenodo", "resource_type": { "id": "publication-report", "title": { "de": "Bericht", "en": "Report" } }, "rights": [ { "description": { "en": "Permits almost any use subject to providing credit and license notice. Frequently used for media assets and educational materials. The most common license for Open Access scientific publications. Not recommended for software." }, "icon": "cc-by-sa-icon", "id": "cc-by-sa-4.0", "props": { "scheme": "spdx", "url": "https://creativecommons.org/licenses/by-sa/4.0/legalcode" }, "title": { "en": "Creative Commons Attribution Share Alike 4.0 International" } } ], "subjects": [ { "subject": "Data Study Groups" }, { "subject": "The Alan Turing Institute" }, { "subject": "Cyber security" }, { "subject": "Machine learning" }, { "subject": "Anomaly detection" }, { "subject": "Data fusion" }, { "subject": "Visualisation" } ], "title": "Data Study Group Final Report: Imperial College London, Los Alamos National Laboratory, Heilbronn Institute" }, "parent": { "access": { "owned_by": { "user": 52260 } }, "communities": {}, "id": "3558250", "pids": { "doi": { "client": "datacite", "identifier": "10.5281/zenodo.3558250", "provider": "datacite" } } }, "pids": { "doi": { "client": "datacite", "identifier": "10.5281/zenodo.3558251", "provider": "datacite" }, "oai": { "identifier": "oai:zenodo.org:3558251", "provider": "oai" } }, "revision_id": 3, "stats": { "all_versions": { "data_volume": 1480842882.0, "downloads": 213, "unique_downloads": 207, "unique_views": 293, "views": 313 }, "this_version": { "data_volume": 1480842882.0, "downloads": 213, "unique_downloads": 207, "unique_views": 289, "views": 309 } }, "status": "published", "updated": "2020-01-20T15:03:08.083145+00:00", "versions": { "index": 1, "is_latest": true } }