Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: SIERRA: Ranking Anomalous Activities in Enterprise Networks   An enterprise today deploys multiple security middleboxes such as firewalls,
IDS, IPS, etc. in its network to collect different kinds of events related to
threats and attacks. These events are streamed into a SIEM (Security
Information and Event Management) system for analysts to investigate and
respond quickly with appropriate actions. However, the number of events
collected for a single enterprise can easily run into hundreds of thousands per
day, much more than what analysts can investigate under a given budget
constraint (time). In this work, we look into the problem of prioritizing
suspicious events or anomalies to analysts for further investigation. We
develop SIERRA, a system that processes event logs from multiple and diverse
middleboxes to detect and rank anomalous activities. SIERRA takes an
unsupervised approach and therefore has no dependence on ground truth data.
Different from other works, SIERRA defines contexts, that help it to provide
visual explanations of highly-ranked anomalous points to analysts, despite
employing unsupervised models. We evaluate SIERRA using months of logs from
multiple security middleboxes of an enterprise network. The evaluations
demonstrate the capability of SIERRA to detect top anomalies in a network while
outperforming naive application of existing anomaly detection algorithms as
well as a state-of-the-art SIEM-based anomaly detection solution.

18
The categories of this paper are: econ
34
The categories of this paper are: chem-ph
20
The categories of this paper are: acc-phys
5
The categories of this paper are: gr-qc
15
The categories of this paper are: nucl-ex
8
The categories of this paper are: hep-ex
19
The categories of this paper are: eess
31
The categories of this paper are: ao-sci
22
The categories of this paper are: chao-dyn
27
The categories of this paper are: comp-gas
37
The categories of this paper are: supr-con
35
The categories of this paper are: mtrl-th
16
The categories of this paper are: stat
21
The categories of this paper are: adap-org
6
The categories of this paper are: astro-ph
36
The categories of this paper are: cmp-lg