Research into Metrics and Performance Analysis in Intrusion

The Army Research Laboratory Research Associateship Program (ARL-RAP) offers challenging research opportunities in continuous monitoring, identifying metrics, developing models, and analyzing performance for intrusion detection systems and networks. Specific research areas include: identifying metrics and continuous monitoring techniques for assessing cyber vulnerability and degree of adversarial activity over wired and wireless networks with distributed intrusion detection sensors; developing experimentally-validated models and computing performance by analyzing, simulating, and/or emulating network traffic, intrusions, false positives and negatives; data fusion, filtering, and secure aggregation in networks with intrusion detection sensors and possibly mobile nodes; and validation methods for intrusion detection models, systems, and tools. This research is conducted within the Computational and Information Sciences Directorate (CISD), which focuses on communications, atmospheric modeling, battlefield visualization, and computing for the digital battlefield. The program is designed to significantly increase the involvement of creative and highly trained scientists and engineers from academia and industry in scientific and technical areas of interest and relevance to the Army.