Data Driven Profiling of Dynamic System Behavior using Hidden Markov Model based Combined Unsupervised and Supervised Classification
نویسنده
چکیده
Dynamic systems are often best characterized by a combination of static and temporal features, with the static features describing time-invariant properties of the system, and the temporal features capturing dynamic aspects of the system. Our goal is to construct context based temporal behavior models of dynamic systems using information from both types of features. Our dynamic system profiling framework consists of three main steps: (i) model generation, (ii) model idation, and (iii) model interpretation. Model generation step can be further decomposed into two components: (ia) temporal model generation, and (ib) context generation. Based on temporal feature values of the systems, temporal model generation step constructs K models to account for dynamic behavior patterns. We choose Hidden Markov Model(HMM)(R.abiner 1989) representation for temporal models. One important and desirable characteristic of HMM is that the hidden states of a HMM can effectively be used to model the set of potentially valid stages going through by a dynamic system and the directed probabilistic links between states be used to model its transition patterns among the set of stages. Our HMM clustering scheme tries to improve upon existing methods in two ways: First, existing HMM clustering systems assume fixed, pre-specified HMM topology. To obtain better fit models, we propose a dynamic and automatic HMM refinement procedure that interleaves with the clustering process and constructs HMMs of appropriate topologies for individual clusters. Bayesian model selection criteria(Chichering 8¢ Heckerman 1997) are employed in this process. Second, existing HMM clustering systems rely on predefined threshold values to determine number of clusters, i.e., the value of K, in the final partition. We take a model based approach(Cheeseman & Stutz 1996) Our clustering model is composed of clusters in the current partition and one hidden state that assigns cluster membership for each object. Given this clustering model structure, the number of clusters in the final partition is one that gives the highest model posterior probability. The K clusters derived from temporal model gener-
منابع مشابه
Alert correlation and prediction using data mining and HMM
Intrusion Detection Systems (IDSs) are security tools widely used in computer networks. While they seem to be promising technologies, they pose some serious drawbacks: When utilized in large and high traffic networks, IDSs generate high volumes of low-level alerts which are hardly manageable. Accordingly, there emerged a recent track of security research, focused on alert correlation, which ext...
متن کاملSupervised and unsupervised classification approaches for human activity recognition using body-mounted sensors
In this paper, the activity recognition problem from 3-d acceleration data measured with body-worn accelerometers is formulated as a problem of multidimensional time series segmentation and classification. More specifically, the proposed approach uses a statistical model based on Multiple Hidden Markov Model Regression (MHMMR) to automatically analyze the human activity. The method takes into a...
متن کاملSpeaker Verification with D Adaptati
This paper presents methods for adapting models in a data fusion-based speaker verification system. The models that are used in the data fusion system are the neural tree network (NTN), dynamic time warping (DTW), and hidden Markov model (HMM). The models provide information based on discriminant information, distortion measurements, and probabilistic evaluation, respectively. The parameters of...
متن کاملSupervised vs. Unsupervised Learning for Operator State Modeling in Unmanned Vehicle Settings
In this paper, we model operator states using hidden Markov models applied to human supervisory control behaviors. More specifically, we model the behavior of an operator of multiple heterogeneous unmanned vehicle systems. The hidden Markov model framework allows the inference of higher operator states from observable operator interaction with a computer interface. For example, a sequence of op...
متن کاملIntrusion Detection Using Evolutionary Hidden Markov Model
Intrusion detection systems are responsible for diagnosing and detecting any unauthorized use of the system, exploitation or destruction, which is able to prevent cyber-attacks using the network package analysis. one of the major challenges in the use of these tools is lack of educational patterns of attacks on the part of the engine analysis; engine failure that caused the complete training, ...
متن کامل