| Preface | p. viii |
| Acknowledgment | p. xi |
| Foundations | |
| Statistical Opportunities, Roles, and Challenges in Network Security | p. 1 |
| Introduction | p. 1 |
| Overview | p. 2 |
| Statistical Approaches in Practice | p. 14 |
| Fundamental Statistical Roles and Challenges in Network Security | p. 22 |
| Summary | p. 27 |
| References | p. 27 |
| Endnotes | p. 34 |
| Statistical Analysis Software | p. 35 |
| Introduction | p. 35 |
| The SAS System | p. 37 |
| STATA | p. 45 |
| R | p. 48 |
| Other Packages | p. 54 |
| Summary | p. 58 |
| References | p. 59 |
| Endnotes | p. 59 |
| Network Traffic and Data | p. 60 |
| Introduction | p. 60 |
| System-Specific Traffic | p. 60 |
| User-Specific Data | p. 65 |
| Publicly Available Data | p. 70 |
| Summary | p. 91 |
| References | p. 92 |
| Endnotes | p. 94 |
| Appendix | p. 95 |
| Network Data Characteristics | p. 104 |
| Introduction | p. 104 |
| Random Variables | p. 105 |
| Variable Distributions | p. 109 |
| Network Data Modules | p. 116 |
| Summary | p. 121 |
| References | p. 121 |
| Data Mining and Modeling | |
| Exploring Network Data | p. 124 |
| Introduction | p. 124 |
| Descriptive Analysis | p. 125 |
| Visualizing Analysis | p. 134 |
| Data Transformation | p. 144 |
| Summary | p. 155 |
| References | p. 156 |
| Appendix | p. 157 |
| Data Reduction | p. 172 |
| Introduction | p. 172 |
| Data Structure Detection | p. 173 |
| Sampling Network Traffic | p. 188 |
| Sample Size | p. 199 |
| Summary | p. 206 |
| References | p. 206 |
| Appendix | p. 210 |
| Models Network Data for Association and Prediction | p. 220 |
| Introduction | p. 220 |
| Bivariate Analysis | p. 221 |
| Linear Regression Modeling | p. 232 |
| Robustness Association | p. 249 |
| Summary | p. 257 |
| References | p. 257 |
| Appendix | p. 260 |
| Measuring User Behavior | p. 261 |
| Introduction | p. 261 |
| User Behavior Pattern | p. 262 |
| Scoring Methods | p. 276 |
| Profiling Models | p. 286 |
| Summary | p. 297 |
| References | p. 297 |
| Appendix | p. 301 |
| Classifications, Profiles, and Making Better Decisions | |
| Classification Based on Supervised Learning | p. 305 |
| Introduction | p. 305 |
| Generalized Linear Methods | p. 306 |
| Nonparametric Methods | p. 316 |
| Other Linear and Nonlinear Methods | p. 333 |
| Summary | p. 342 |
| References | p. 343 |
| Endnote | p. 347 |
| Classification Based on Unsupervised Learning | p. 348 |
| Introduction | p. 348 |
| Probability Models | p. 349 |
| Similarity Models | p. 365 |
| Multidimensional Models | p. 379 |
| Summary | p. 390 |
| References | p. 392 |
| Appendix | p. 395 |
| Decision Analysis in Network Security | p. 396 |
| Introduction | p. 396 |
| Analysis of Uncertainty | p. 398 |
| Statistical Control Chart | p. 411 |
| Ranking | p. 415 |
| Summary | p. 422 |
| References | p. 423 |
| Appendix | p. 425 |
| Evaluation | p. 427 |
| Introduction | p. 427 |
| Data Reliability, Validity, and Quality | p. 428 |
| Goodness of Classification | p. 435 |
| Assess Model Performance | p. 447 |
| Summary | p. 455 |
| References | p. 456 |
| About the Author | p. 458 |
| Index | p. 459 |
| Table of Contents provided by Ingram. All Rights Reserved. |