The IEEE 802.11 networks are vulnerable to numerous wireless-specific attacks. Attackers can implement MAC address spoofing techniques to launch these attacks, while masquerading themselves behind a false MAC address. The implementation of Intrusion Detection Systems has become fundamental in the development of security infrastructures for wireless networks. This thesis proposes the designing a novel security system that makes use of metrics from multiple layers of observation to produce a collective decision on whether an attack is taking place. The Dempster-Shafer Theory of Evidence is the data fusion technique used to combine the evidences from the different layers. A novel, unsupervised and self- adaptive Basic Probability Assignment (BPA) approach able to automatically adapt its beliefs assignment to the current characteristics of the wireless network is proposed. This BPA approach is composed of three different and independent statistical techniques, which are capable to identify the presence of attacks in real time. Despite the lightweight processing requirements, the proposed security system produces outstanding detection results, generating high intrusion detection accuracy and very low number of false alarms. A thorough description of the generated results, for all the considered datasets is presented in this thesis. The effectiveness of the proposed system is evaluated using different types of injection attacks. Regarding one of these attacks, to the best of the author knowledge, the security system presented in this thesis is the first one able to efficiently identify the Airpwn attack.

Doctor of Philosophy / Department of Computing and Information Sciences / Xinming Ou / Intrusion analysis, i.e., the process of combing through Intrusion Detection System (IDS) alerts and audit logs to identify true successful and attempted attacks, remains a difficult problem in practical network security defense. The primary cause of this problem is the high false positive rate in IDS system sensors used to detect malicious activity. This high false positive rate is attributed to an inability to differentiate nearly certain attacks from those that are merely possible. This inefficacy has created high uncertainty in intrusion analysis and consequently causing an overwhelming amount of work for security analysts. As a solution, practitioners typically resort to a specific IDS-rules set that precisely captures specific attacks. However, this results in failure to discern other forms of the targeted attack because an attack’s polymorphism reflects human intelligence. Alternatively, the addition of generic rules so that an activity with remote indication of an attack will trigger an alert, requires the security analyst to discern true alerts from a multitude of false alerts, thus perpetuating the original problem. The perpetuity of this trade-off issue is a dilemma that has puzzled the cyber-security community for years. A solution to this dilemma includes reducing uncertainty in intrusion analysis by making IDS-nearly-certain alerts prominently discernible. Therefore, I propose alerts prioritization, which can be attained by integrating multiple methods. I use IDS alerts correlation by building attack scenarios in a ground-up manner. In addition, I use Dempster-Shafer Theory (DST), a non-traditional theory to quantify uncertainty, and I propose a new method for fusing non-independent alerts in an attack scenario. Finally, I propose usage of semi-supervised learning to capture an organization’s contextual knowledge, consequently improving prioritization. Evaluation of these approaches was conducted using multiple datasets. Evaluation results strongly indicate that the ranking provided by the approaches gives good prioritization of IDS alerts based on their likelihood of indicating true attacks.

Effective automated tracking and locating of the thousands of materials on construction sites improves material distribution and project performance and thus has a significant positive impact on construction productivity. Many locating technologies and data sources have therefore been developed, and the deployment of a cost-effective, scalable, and easy-to-implement materials location sensing system at actual construction sites has very recently become both technically and economically feasible. However, considerable opportunity still exists to improve the accuracy, precision, and robustness of such systems. The quest for fundamental methods that can take advantage of the relative strengths of each individual technology and data source motivated this research, which has led to the development of new data fusion methods for improving materials location estimation. In this study a data fusion model is used to generate an integrated solution for the automated identification, location estimation, and relocation detection of construction materials. The developed model is a modified functional data fusion model. Particular attention is paid to noisy environments where low-cost RFID tags are attached to all materials, which are sometimes moved repeatedly around the site. A portion of the work focuses partly on relocation detection because it is closely coupled with location estimation and because it can be used to detect the multi-handling of materials, which is a key indicator of inefficiency. This research has successfully addressed the challenges of fusing data from multiple sources of information in a very noisy and dynamic environment. The results indicate potential for the proposed model to improve location estimation and movement detection as well as to automate the calculation of the incidence of multi-handling.

During the last decades, great steps have been taken to decrease passenger fatality in cars. Systems such as ABS and airbags have been developed for this purpose alone. But not much effort has been put into pedestrian safety. In traffic today, pedestrians are one of the most endangered participants and in recent years, there has been an increased demand for pedestrian safety from the European Enhanced Vehicle safety Committee and the European New Car Assessment Programme has thereby developed tests where pedestrian safety is rated. With this, detection of pedestrians has arised as a part in the automotive safety research. This thesis provides some of this research available in the area and a brief introduction to some of the sensors readily available. The objective of this work is to detect pedestrians in front of a vehicle by using thermoelectric infrared sensors fused with short range radar sensors and also to minimize any missed detections or false alarms. There has already been extensive work performed with the thermoelectric infrared sensors for this sole purpose and this thesis is based on that work. Information is provided about the sensors used and an explanation of how they are set up during this work. Methods used for classifying objects are given and the assumptions made about pedestrians in this system. A basic tracking algorithm is used to track radar detected objects in order to provide the fusion system with better data. The approach chosen for the sensor fusion is a central-level fusion where the probabilities for a pedestrian from the radars and the thermoelectric infrared sensors are combined using Dempster-Shafer Theory and accumulated over time in the Occupancy Grid framework. Theories that are extensively used in this thesis are explained in detail and discussed accordingly in different chapters. Finally the experiments undertaken and the results attained from the presented system are shown. A comparison is made with the previous detection system, which only uses thermoelectric infrared sensors and of which this work continues on. Conclusions regarding what this system is capable of are drawn with its inherent strengths and weaknesses.

Effective automated tracking and locating of the thousands of materials on construction sites improves material distribution and project performance and thus has a significant positive impact on construction productivity. Many locating technologies and data sources have therefore been developed, and the deployment of a cost-effective, scalable, and easy-to-implement materials location sensing system at actual construction sites has very recently become both technically and economically feasible. However, considerable opportunity still exists to improve the accuracy, precision, and robustness of such systems. The quest for fundamental methods that can take advantage of the relative strengths of each individual technology and data source motivated this research, which has led to the development of new data fusion methods for improving materials location estimation. In this study a data fusion model is used to generate an integrated solution for the automated identification, location estimation, and relocation detection of construction materials. The developed model is a modified functional data fusion model. Particular attention is paid to noisy environments where low-cost RFID tags are attached to all materials, which are sometimes moved repeatedly around the site. A portion of the work focuses partly on relocation detection because it is closely coupled with location estimation and because it can be used to detect the multi-handling of materials, which is a key indicator of inefficiency. This research has successfully addressed the challenges of fusing data from multiple sources of information in a very noisy and dynamic environment. The results indicate potential for the proposed model to improve location estimation and movement detection as well as to automate the calculation of the incidence of multi-handling.

<p>During the last decades, great steps have been taken to decrease passenger fatality in cars. Systems such as ABS and airbags have been developed for this purpose alone. But not much effort has been put into pedestrian safety. In traffic today, pedestrians are one of the most endangered participants and in recent years, there has been an increased demand for pedestrian safety from the European Enhanced Vehicle safety Committee and the European New Car Assessment Programme has thereby developed tests where pedestrian safety is rated. With this, detection of pedestrians has arised as a part in the automotive safety research.</p><p>This thesis provides some of this research available in the area and a brief introduction to some of the sensors readily available. The objective of this work is to detect pedestrians in front of a vehicle by using thermoelectric infrared sensors fused with short range radar sensors and also to minimize any missed detections or false alarms. There has already been extensive work performed with the thermoelectric infrared sensors for this sole purpose and this thesis is based on that work.</p><p>Information is provided about the sensors used and an explanation of how they are set up during this work. Methods used for classifying objects are given and the assumptions made about pedestrians in this system. A basic tracking algorithm is used to track radar detected objects in order to provide the fusion system with better data. The approach chosen for the sensor fusion is a central-level fusion where the probabilities for a pedestrian from the radars and the thermoelectric infrared sensors are combined using Dempster-Shafer Theory and accumulated over time in the Occupancy Grid framework. Theories that are extensively used in this thesis are explained in detail and discussed accordingly in different chapters.</p><p>Finally the experiments undertaken and the results attained from the presented system are shown. A comparison is made with the previous detection system, which only uses thermoelectric infrared sensors and of which this work continues on. Conclusions regarding what this system is capable of are drawn with its inherent strengths and weaknesses.</p>

Thèse (Ph.D.)--Université de Sherbrooke (Canada), 2006. / Titre de l'écran-titre (visionné le 27 févr. 2008). In ProQuest dissertations and theses. Publié aussi en version papier.

Foresters are faced with difficulties to obtain sub-polygon information with the mapping methods available nowadays. The main objective of this work consisted in the development of new methods able to improve the map accuracy of regenerating forest stands and mature forest stands in the South of Québec, Canada. The Dempster-Shafer Theory (DST) and the Dezert-Smarandache Theory (DSmT) showed their ability to integrate multiple heterogenous data sources to go further than the classical classification procedures like the maximum likelihood or the spectral unmixing, in terms of map accuracy. Improvement on the ability to map regenerating stands, passed from 82.7% with the maximum likelihood method to 91.1% with the Free DSm model with a total transfer of the mass of the"Union" class to the"Intersection" class (+ 8.4%). For the mature stands, the improvement passed from 63.8% with the K nearest neighbour to 79.5% with the DST according to a classical belief structuration and the hybrid decision rule for which the conflict threshold was fixed at 10% (+ 15.7%). Our results with DST and a bayesian belief structuration showed the difficulty to model the uncertainty in the fusion process. This is probably due to the lack of scientific knowledge about the influence of the biophysical and climatic parameters on the mapped forest stands and to the necessity to model specifically the uncertainty for each source. Our work showed concrete improvement when mapping forest stands with DST which is encouraging to continue explorating the fundamental principle of the proposed hybrid decision rule. This means a particular focus on the difference between the fused masses of each potential class after the fusion, to choose the best hypothesis.

Cette thèse constitue une nouvelle approche pour la prédiction des maladies des plantes dans une plantation par combinaison de fusion de données et modélisation spatio-temporelle. La maladie des plantes est un problème majeur dans le monde de l'agriculture. Par exemple en Malaisie, la maladie de la pourriture de basal de la tige (BSR) causée par le champignon Ganoderma Boninense est la maladie la plus grave pour les plantations de palmiers à huile. Le champignon infecte les palmiers à huile,causant des pertes de rendement et détruisant au final les arbres. Divers facteurs ont été précédemment signalés, qui influencent l'incidence de la BSR, tels que les cultures précédentes, les techniques de replantation, les types de sols et l'âge des arbres. Une gestion efficace et durable des stratégies pour contrôler le BSR se heurte principalement à un manque de compréhension des mécanismes d'établissement de la maladie, de son développement et de sa propagation. La présente recherche est une tentative d'appliquer la technique de fusion de données et la modélisation temporelle en système d'Information géographique (SIG) pour étudier le comportement des maladies des plantes dans un domaine particulier (zone artisanale). Cette recherche portera sur comment les SIG peuvent aider à évaluer la distribution des maladies des plantes dans une plantation de petite échelle. Avec les progrès simultanés dans les systèmes de positionnement global (GPS) et l'utilisation des systèmes d'Information géographique, ces techniques ont fourni de puissants outils d'analyse pour l'agriculture de précision. Les données pour l'analyse proviennent de palmiers à huile des expériences de densité de plantation aux stations de recherche MPOB à Teluk Intan, Perak, Malaisie.Dans le cas de la maladie de la BSR, les résultats de l'émission de modélisation prédictive ont observé une corrélation entre les maladies BSR prédites avec celles visuellement données par le BSR. Il a été constaté que la modélisation prédictive proposée a bien prédit la présence de la maladie de la BSR. Même si au début d'infection des maladies BSR, le modèle n'a pas fixé exactement la distribution de la maladie, la performance du modèle sera améliorée avec la sélection de la source de données. Dans l'ensemble, le modèle a bien prédit la présence de maladies avec une précision allant jusqu'à 98,9 %. / This thesis represents a new approach for predicting plant disease in a plantation through combination of data fusion and spatio-temporal modelling. Plant disease is a major problem in the world of agriculture. Example in Malaysia, basalstem rot disease (BSR) caused by Ganoderma Boinense is the most serious disease for oil palm plantation in Malaysia. The fungus infects oil palm trees, initially causing yield loss and finally killing the trees. Various factors were previously reported to influence incidence of BSR, such as previous crops, techniques for replanting, types of soils and the age of trees. At present effective and sustainable management strategies to control BSR are hampered mainly by a lack of understanding of mechanisms of disease establishment, development and spread. The present research is an attempt to apply data fusion technique and temporal modelling in Geographical Information System (GIS) to investigate the behaviour of plant disease in a specific area (small skill area). This research will focus on how GIS can help to assess the distribution plant disease in a small scale plantation. With concurrent advances in global positioning systems (GPS) and the use of geographical Information Systems(GIS) techniques have provided powerful analysis tools for precision agriculture. Data for analysis were obtained from oil palm planting density experiments at MPOB research stations at Teluk Intan, Perak, Malaysia. In the case of BSR disease, the results of the predictive modelling show a significance correlation between predicted BSR diseases with visually observed BSR data. It found that the proposed predictive modelling has well predicted the presence of BSR disease. Although at the beginning stage of BSR diseases infection, the model has not fitted exactly the distribution of the disease, we believe that with the proper selection of the source of data, the performance of the model will be improved.Overall, the model has well predicted the presence of diseases with accuracy up to 98.9%.

La fusion d'informations issues de plusieurs sources cherche à améliorer la prise de décision. Pour réaliser cette fusion, la théorie des fonctions de croyance utilise des règles de combinaison faisant bien souvent l'hypothèse de l'indépendance des sources. Cette forte hypothèse n'est, cependant, ni formalisée ni vérifiée. Elle est supposée pour justifier le choix du type de règles à utiliser sans avoir, pour autant, un moyen de la vérifier. Nous proposons dans ce rapport de thèse un apprentissage de l'indépendance cognitive de sources d'information. Nous détaillons également une approche d'apprentissage de la dépendance positive et négative des sources. Les degrés d'indépendance, de dépendance positive et négative des sources ont principalement trois utilités. Premièrement, ces degrés serviront à choisir le type de règles de combinaison à utiliser lors de la combinaison. Deuxièmement, ces degrés exprimés par une fonction de masse sont intégrés par une approche d'affaiblissement avant de réaliser la combinaison d'information. Une troisième utilisation de cette mesure d'indépendance consiste à l'intégrer dans une nouvelle règle de combinaison. La règle que nous proposons est une moyenne pondérée avec ce degré d'indépendance. / The theory of belief functions manages uncertainty and proposes a set of combination rules to aggregate beliefs of several sources. Some combination rules mix evidential information where sources are independent; other rules are suited to combine evidential information held by dependent sources. Information on sources ' independence is required to justify the choice of the adequate type of combination rules. In this thesis, we suggest a method to quantify sources' degrees of independence that may guide the choice of the appropriate type of combination rules. In fact, we propose a statistical approach to learn sources' degrees of independence from all provided evidential information. There are three main uses of estimating sources' degrees of independence: First, we use sources' degree of independence to guide the choice of combination rules to use when aggregating beliefs of several sources. Second, we propose to integrate sources' degrees of independence into sources' beliefs leading to an operator similar to the discounting. Finally, we define a new combination rule weighted with sources' degree of independence.