W&S is a system that evolved to address a specific albeit very broad, class of problems. Initial work focused on detecting clerical errors in materials accounting data. From this start, W&S was extended to identify all types of rare materials accounting transactions. Next, W&S was rebuilt and enhanced to deal with computer security audit trails. In this problem area, W&S was configured to look for evidence of computer misuse. Finally, W&S was enchanced and extended to improve its generality and better accommodate process control data and network security data. W&S can simultaneously gather data from multiple, networked sources; filter (select and transform) raw transaction data; compute data aggregations and other derived quantities; automatically detect nornal behavior patterns; accept and apply expert knowledge of behavior; and find anomalies (non-conforming behavior).
To order this software or receive further information, please fill out the following request: Request Software
@misc{osti_1230146,
title = {Wisdom and Sense, Version 00},
author = {Redle, K.},
abstractNote = {W&S is a system that evolved to address a specific albeit very broad, class of problems. Initial work focused on detecting clerical errors in materials accounting data. From this start, W&S was extended to identify all types of rare materials accounting transactions. Next, W&S was rebuilt and enhanced to deal with computer security audit trails. In this problem area, W&S was configured to look for evidence of computer misuse. Finally, W&S was enchanced and extended to improve its generality and better accommodate process control data and network security data. W&S can simultaneously gather data from multiple, networked sources; filter (select and transform) raw transaction data; compute data aggregations and other derived quantities; automatically detect nornal behavior patterns; accept and apply expert knowledge of behavior; and find anomalies (non-conforming behavior).},
doi = {},
url = {https://www.osti.gov/biblio/1230146},
year = {Tue Mar 03 00:00:00 EST 1992},
month = {Tue Mar 03 00:00:00 EST 1992},
note =
}
