Multi-Step Attack Detection Based on Pre-Trained Hidden Markov Models.

Currently, hidden Markov-based multi-step attack detection models are mainly trained using the unsupervised Baum-Welch algorithm. The Baum-Welch algorithm is sensitive to the initial values of model parameters. However, its training uses random or average parameter initialization methods, which frequently results in the model training into a local optimum, thus, making the model unable to fit the alert logs well and thereby reducing the detection effectiveness of the model. To solve this issue, we propose a pre-training method for multi-step attack detection models based on the high semantic similarity of alerts in the same attack phase. The method first clusters the alerts based on their semantic information and pre-classifies the attack phase to which each alert belongs. Then, the distance of the alert vector to each attack stage is converted into the probability of generating alerts in each attack stage, replacing the initial value of Baum-Welch. The effectiveness of the proposed method is evaluated using the DARPA 2000 dataset, DEFCON21 CTF dataset, and ISCXIDS 2012 dataset. The experimental results show that the hidden Markov multi-step attack detection method based on pre-training of the proposed model parameters had higher detection accuracy than the Baum-Welch-based, K-means-based, and transfer learning differential evolution-based hidden Markov multi-step attack detection methods.

ZD7288 inhibits the synaptic transmission in the pathway from perforant pathway fibers to CA3 region in rat hippocampus.

AIM: To study the effect of ZD7288 on synaptic transmission in the pathway from perforant pathway (PP) fibers to CA3 region in rat hippocampus. METHODS: The extracellular recording technique in vivo was used to record the CA3 region field potentials. High-performance liquid chromatography (HPLC) with fluorescence detection was applied to measure the content of amino acids in hippocampal tissues. The effect of ZD7288 and CsCl on the amplitudes of population spike (PS) in CA3 region evoked by stimulation (0.5 Hz) of the perforant pathway (PP) fibers, and the content of amino acids in hippocampal tissue were observed. RESULTS: Microinjection of ZD7288 (20, 100 and 200 nmol) and CsCl (1, 5 and 10 micromol) into CA3 region decreased the population spike (PS) amplitudes in a dose-dependent manner. The inhibitory effects appeared at 5 min after microinjection and lasted at least 90 min. In those rats treated with ZD7288 (100 nmol), the contents of glutamate, aspartate, glycine and GABA decreased significantly as compared to those of saline control (all P < 0.01, except P < 0.05 for that of glycine). A similar decrease in the contents of amino acids was observed when the rats were microinjected with CsCl (5 micromol). CONCLUSION; ZD7288 could obviously inhibit synaptic transmission in the pathway from PP fibers to CA3 region in rat hippocampus, and this action of ZD7288 may be associated with altered contents of amino acids.