@article{SchloerRingHotho2020,
  author    = {Schl{\"o}r, Daniel and Ring, Markus and Hotho, Andreas},
  title     = {iNALU: Improved Neural Arithmetic Logic Unit},
  series = {Frontiers in Artificial Intelligence},
  volume    = {3},
  journal   = {Frontiers in Artificial Intelligence},
  issn      = {2624-8212},
  doi       = {10.3389/frai.2020.00071},
  url       = {http://nbn-resolving.de/urn:nbn:de:bvb:20-opus-212301},
  year      = {2020},
  abstract  = {Neural networks have to capture mathematical relationships in order to learn various tasks. They approximate these relations implicitly and therefore often do not generalize well. The recently proposed Neural Arithmetic Logic Unit (NALU) is a novel neural architecture which is able to explicitly represent the mathematical relationships by the units of the network to learn operations such as summation, subtraction or multiplication. Although NALUs have been shown to perform well on various downstream tasks, an in-depth analysis reveals practical shortcomings by design, such as the inability to multiply or divide negative input values or training stability issues for deeper networks. We address these issues and propose an improved model architecture. We evaluate our model empirically in various settings from learning basic arithmetic operations to more complex functions. Our experiments indicate that our model solves stability issues and outperforms the original NALU model in means of arithmetic precision and convergence.},
  language  = {en}
}
@article{RingLandesHotho2018,
  author    = {Ring, Markus and Landes, Dieter and Hotho, Andreas},
  title     = {Detection of slow port scans in flow-based network traffic},
  series = {PLoS ONE},
  volume    = {13},
  journal   = {PLoS ONE},
  number    = {9},
  doi       = {10.1371/journal.pone.0204507},
  url       = {http://nbn-resolving.de/urn:nbn:de:bvb:20-opus-226305},
  pages     = {e0204507, 1-18},
  year      = {2018},
  abstract  = {Frequently, port scans are early indicators of more serious attacks. Unfortunately, the detection of slow port scans in company networks is challenging due to the massive amount of network data. This paper proposes an innovative approach for preprocessing flow-based data which is specifically tailored to the detection of slow port scans. The preprocessing chain generates new objects based on flow-based data aggregated over time windows while taking domain knowledge as well as additional knowledge about the network structure into account. The computed objects are used as input for the further analysis. Based on these objects, we propose two different approaches for detection of slow port scans. One approach is unsupervised and uses sequential hypothesis testing whereas the other approach is supervised and uses classification algorithms. We compare both approaches with existing port scan detection algorithms on the flow-based CIDDS-001 data set. Experiments indicate that the proposed approaches achieve better detection rates and exhibit less false alarms than similar algorithms.},
  language  = {en}
}