Advanced Search
MyIDEAS: Login

Modelling fraud detection by attack trees and Choquet integral

Contents:

Author Info

  • Silvia Bortot
  • Mario Fedrizzi
  • Silvio Giove
Registered author(s):

    Abstract

    Modelling an attack tree is basically a matter of associating a logical "and" and a logical "or" but in most of real world applications related to fraud management the "and/or"logic is not adequate to effectively represent the relationship between a parent node and its children, most of all when information about attributes is associated to the nodes and the main problem to solve is how to promulgate attribute values up the tree through recursive aggregation operations occurring at the "and/or"nodes. OWA-based aggregations have been introduced to generalize "and" and "or" operators starting from the observation that in between the extremes "or all"(and) and "or any"(or), terms (quantifiers) like "several" "most" "few" "some" etc. can be introduced to represent the different weights associated to the nodes in the aggregation. The aggregation process taking place at an OWA node depends on the ordered position of the child nodes but it doesn't take care of the possible interactions between the nodes. In this paper, we propose to overcome this drawback introducing the Choquet integral whose distinguished feature is to be able to take into account the interaction between nodes. At first, the attack tree is valuated recursively through a bottom-up algorithm whose complexity is linear versus the number of nodes and exponential for every node. Then, the algorithm is extended assuming that the attribute values in the leaves are unimodal LR fuzzy numbers and the calculation of Choquet integral is carried out using the alpha-cuts.

    Download Info

    If you experience problems downloading a file, check if you have the proper application to view it first. In case of further problems read the IDEAS help page. Note that these files are not on the IDEAS site. Please be patient as the files may be large.
    File URL: http://www.unitn.it/files/download/13980/92011.pdf
    Download Restriction: no

    Bibliographic Info

    Paper provided by Department of Computer and Management Sciences, University of Trento, Italy in its series DISA Working Papers with number 2011/09.

    as in new window
    Length: 22 pages
    Date of creation: Aug 2011
    Date of revision: 31 Aug 2011
    Handle: RePEc:trt:disawp:2011/09

    Contact details of provider:
    Postal: via Inama, 5 -- I-38100 Trento TN
    Phone: +39-0461-882126
    Fax: +39-0461-882124
    Email:
    Web page: http://www.unitn.it/disa
    More information through EDIRC

    Order Information:
    Postal: DISA Università degli Studi di Trento via Inama, 5 I-38122 Trento TN Italy
    Email:
    Web: http://www.unitn.it/disa

    Related research

    Keywords: Fraud detection; attack tree; ordered weighted averaging (OWA) operator; Choquet integral; fuzzy numbers.;

    This paper has been announced in the following NEP Reports:

    References

    References listed on IDEAS
    Please report citation or reference errors to , or , if you are the registered author of the cited work, log in to your RePEc Author Service profile, click on "citations" and make appropriate adjustments.:
    as in new window
    1. repec:hal:cesptp:halshs-00267932 is not listed on IDEAS
    2. GHIRARDATO, Paolo & LE BRETON, Michel, 1999. "Choquet rationality," CORE Discussion Papers 1999012, Université catholique de Louvain, Center for Operations Research and Econometrics (CORE).
    3. Michel Grabisch & Christophe Labreuche & Jean-Claude Vansnick, 2003. "On the Extension of Pseudo-Boolean Functions for the Aggregation of Interacting Criteria," Post-Print hal-00272780, HAL.
    4. Grabisch, Michel, 1996. "The application of fuzzy integrals in multicriteria decision making," European Journal of Operational Research, Elsevier, vol. 89(3), pages 445-456, March.
    5. repec:hal:cesptp:halshs-00496558 is not listed on IDEAS
    6. repec:hal:cesptp:halshs-00187175 is not listed on IDEAS
    7. De Waegenaere, Anja & Wakker, Peter P., 2001. "Nonmonotonic Choquet integrals," Journal of Mathematical Economics, Elsevier, vol. 36(1), pages 45-60, September.
    8. Grabisch, Michel & Kojadinovic, Ivan & Meyer, Patrick, 2008. "A review of methods for capacity identification in Choquet integral based multi-attribute utility theory: Applications of the Kappalab R package," European Journal of Operational Research, Elsevier, vol. 186(2), pages 766-785, April.
    9. Cardin, Marta & Giove, Silvio, 2008. "Aggregation Functions With Non-Monotonic Measures," Fuzzy Economic Review, International Association for Fuzzy-set Management and Economy (SIGEF), vol. 0(2), pages 3-15, November.
    10. Grabisch, M. & Roubens, M., 1998. "An Axiomatic Approach to the Concept of Interaction Among Players in Cooperative Games," Liege - Groupe d'Etude des Mathematiques du Management et de l'Economie 9818, UNIVERSITE DE LIEGE, Faculte d'economie, de gestion et de sciences sociales, Groupe d'Etude des Mathematiques du Management et de l'Economie.
    Full references (including those not matched with items on IDEAS)

    Citations

    Lists

    This item is not listed on Wikipedia, on a reading list or among the top items on IDEAS.

    Statistics

    Access and download statistics

    Corrections

    When requesting a correction, please mention this item's handle: RePEc:trt:disawp:2011/09. See general information about how to correct material in RePEc.

    For technical questions regarding this item, or to correct its authors, title, abstract, bibliographic or download information, contact: (Roberto Gabriele).

    If you have authored this item and are not yet registered with RePEc, we encourage you to do it here. This allows to link your profile to this item. It also allows you to accept potential citations to this item that we are uncertain about.

    If references are entirely missing, you can add them using this form.

    If the full references list an item that is present in RePEc, but the system did not link to it, you can help with this form.

    If you know of missing items citing this one, you can help us creating those links by adding the relevant references in the same way as above, for each refering item. If you are a registered author of this item, you may also want to check the "citations" tab in your profile, as there may be some citations waiting for confirmation.

    Please note that corrections may take a couple of weeks to filter through the various RePEc services.