How to aggregate scores in a multi-heuristic detection system : A comparison between WOWA and Neural Networks

Apr 24, 2020 by Thibault | 243 views

APT Detection

https://cylab.be/blog/75/how-to-aggregate-scores-in-a-multi-heuristic-detection-system-a-comparison-between-wowa-and-neural-networks

Cyber-attacks are becoming increasingly complex and therefore require more sophisticated detection systems. A lot of these are actually combine multiple detection algorithms. A crucial step is then to aggregate all detection scores correctly.

Today we released a short paper where we compare two aggregation approaches:

  1. train a Weighted Ordered Weighted Average (WOWA) operator using a genetic algorithm and
  2. train a Neural Network using backpropagation.

Download the paper: How to aggregate scores in a multi-heuristic detection system : A comparison between WOWA and Neural Networks [PDF]