TY - INPR A1 - Prasse, Paul A1 - Gruben, Gerrit A1 - Machlika, Lukas A1 - Pevny, Tomas A1 - Sofka, Michal A1 - Scheffer, Tobias T1 - Malware Detection by HTTPS Traffic Analysis N2 - In order to evade detection by network-traffic analysis, a growing proportion of malware uses the encrypted HTTPS protocol. We explore the problem of detecting malware on client computers based on HTTPS traffic analysis. In this setting, malware has to be detected based on the host IP address, ports, timestamp, and data volume information of TCP/IP packets that are sent and received by all the applications on the client. We develop a scalable protocol that allows us to collect network flows of known malicious and benign applications as training data and derive a malware-detection method based on a neural networks and sequence classification. We study the method's ability to detect known and new, unknown malware in a large-scale empirical study. KW - machine learning KW - computer security Y1 - 2017 U6 - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:kobv:517-opus4-100942 ER - TY - INPR A1 - Roelly, Sylvie A1 - Ruszel, Wioletta M. T1 - Propagation of Gibbsianness for infinite-dimensional diffusions with space-time interaction N2 - We consider infinite-dimensional diffusions where the interaction between the coordinates has a finite extent both in space and time. In particular, it is not supposed to be smooth or Markov. The initial state of the system is Gibbs, given by a strong summable interaction. If the strongness of this initial interaction is lower than a suitable level, and if the dynamical interaction is bounded from above in a right way, we prove that the law of the diffusion at any time t is a Gibbs measure with absolutely summable interaction. The main tool is a cluster expansion in space uniformly in time of the Girsanov factor coming from the dynamics and exponential ergodicity of the free dynamics to an equilibrium product measure. T3 - Preprints des Instituts für Mathematik der Universität Potsdam - 2(2013)18 KW - infinite-dimensional diffusion KW - cluster expansion KW - non-Markov drift KW - Girsanov formula KW - ultracontractivity Y1 - 2013 U6 - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:kobv:517-opus-69014 ER - TY - INPR A1 - Cattiaux, Patrick A1 - Fradon, Myriam A1 - Kulik, Alexei Michajlovič A1 - Roelly, Sylvie T1 - Long time behavior of stochastic hard ball systems N2 - We study the long time behavior of a system of two or three Brownian hard balls living in the Euclidean space of dimension at least two, submitted to a mutual attraction and to elastic collisions. T3 - Preprints des Instituts für Mathematik der Universität Potsdam - 2(2013)15 KW - Stochastic differential equations KW - hard core interaction KW - reversible measure KW - normal reflection KW - local time Y1 - 2013 U6 - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:kobv:517-opus-68388 ER - TY - INPR A1 - Ly, Ibrahim A1 - Tarkhanov, Nikolai Nikolaevich T1 - Generalised Beltrami equations N2 - We enlarge the class of Beltrami equations by developping a stability theory for the sheaf of solutions of an overdetermined elliptic system of first order homogeneous partial differential equations with constant coefficients in the Euclidean space. T3 - Preprints des Instituts für Mathematik der Universität Potsdam - 2(2013)14 KW - Quasiconformal mapping KW - Beltrami equation Y1 - 2013 U6 - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:kobv:517-opus-67416 ER - TY - INPR A1 - Shlapunov, Alexander A1 - Tarkhanov, Nikolai Nikolaevich T1 - Sturm-Liouville problems in domains with non-smooth edges N2 - We consider a (generally, non-coercive) mixed boundary value problem in a bounded domain for a second order elliptic differential operator A. The differential operator is assumed to be of divergent form and the boundary operator B is of Robin type. The boundary is assumed to be a Lipschitz surface. Besides, we distinguish a closed subset of the boundary and control the growth of solutions near this set. We prove that the pair (A,B) induces a Fredholm operator L in suitable weighted spaces of Sobolev type, the weight function being a power of the distance to the singular set. Moreover, we prove the completeness of root functions related to L. T3 - Preprints des Instituts für Mathematik der Universität Potsdam - 2(2013)13 KW - Second order elliptic equations KW - non-coercive boundary conditions KW - root functions KW - weighted spaces Y1 - 2013 U6 - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:kobv:517-opus-67336 ER - TY - INPR A1 - Alsaedy, Ammar A1 - Tarkhanov, Nikolai Nikolaevich T1 - Normally solvable nonlinear boundary value problems N2 - We study a boundary value problem for an overdetermined elliptic system of nonlinear first order differential equations with linear boundary operators. Such a problem is solvable for a small set of data, and so we pass to its variational formulation which consists in minimising the discrepancy. The Euler-Lagrange equations for the variational problem are far-reaching analogues of the classical Laplace equation. Within the framework of Euler-Lagrange equations we specify an operator on the boundary whose zero set consists precisely of those boundary data for which the initial problem is solvable. The construction of such operator has much in common with that of the familiar Dirichlet to Neumann operator. In the case of linear problems we establish complete results. T3 - Preprints des Instituts für Mathematik der Universität Potsdam - 2(2013)11 KW - Nonlinear Laplace operator KW - boundary value problem KW - Dirichlet to Neumann operator Y1 - 2013 U6 - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:kobv:517-opus-65077 SN - 2193-6943 ER - TY - INPR A1 - Kiselev, Oleg A1 - Tarkhanov, Nikolai Nikolaevich T1 - The capture of a particle into resonance at potential hole with dissipative perturbation N2 - We study the capture of a particle into resonance at a potential hole with dissipative perturbation and periodic outside force. The measure of resonance solutions is evaluated. We also derive an asymptotic formula for the parameter range of those solutions which are captured into resonance. T3 - Preprints des Instituts für Mathematik der Universität Potsdam - 2 (2013) 9 KW - Capture into resonance KW - small parameter KW - matching of asymptotic expansions Y1 - 2013 U6 - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:kobv:517-opus-64725 SN - 2193-6943 ER - TY - INPR A1 - Léonard, Christian A1 - Roelly, Sylvie A1 - Zambrini, Jean-Claude T1 - Temporal symmetry of some classes of stochastic processes N2 - In this article we analyse the structure of Markov processes and reciprocal processes to underline their time symmetrical properties, and to compare them. Our originality consists in adopting a unifying approach of reciprocal processes, independently of special frameworks in which the theory was developped till now (diffusions, or pure jump processes). This leads to some new results, too. T3 - Preprints des Instituts für Mathematik der Universität Potsdam - 2 (2013) 7 KW - Markov processes KW - reciprocal processes KW - time symmetry Y1 - 2013 U6 - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:kobv:517-opus-64599 SN - 2193-6943 ER - TY - INPR A1 - Roelly, Sylvie T1 - Reciprocal processes : a stochastic analysis approach N2 - Reciprocal processes, whose concept can be traced back to E. Schrödinger, form a class of stochastic processes constructed as mixture of bridges, that satisfy a time Markov field property. We discuss here a new unifying approach to characterize several types of reciprocal processes via duality formulae on path spaces: The case of reciprocal processes with continuous paths associated to Brownian diffusions and the case of pure jump reciprocal processes associated to counting processes are treated. This presentation is based on joint works with M. Thieullen, R. Murr and C. Léonard. T3 - Preprints des Instituts für Mathematik der Universität Potsdam - 2 (2013) 6 KW - Reciprocal process KW - Brownian bridge KW - Poisson bridge KW - duality formula Y1 - 2013 U6 - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:kobv:517-opus-64588 SN - 2193-6943 ER - TY - INPR A1 - Nehring, Benjamin A1 - Poghosyan, Suren A1 - Zessin, Hans T1 - On the construction of point processes in statistical mechanics N2 - By means of the cluster expansion method we show that a recent result of Poghosyan and Ueltschi (2009) combined with a result of Nehring (2012) yields a construction of point processes of classical statistical mechanics as well as processes related to the Ginibre Bose gas of Brownian loops and to the dissolution in R^d of Ginibre's Fermi-Dirac gas of such loops. The latter will be identified as a Gibbs perturbation of the ideal Fermi gas. On generalizing these considerations we will obtain the existence of a large class of Gibbs perturbations of the so-called KMM-processes as they were introduced by Nehring (2012). Moreover, it is shown that certain "limiting Gibbs processes" are Gibbs in the sense of Dobrushin, Lanford and Ruelle if the underlying potential is positive. And finally, Gibbs modifications of infinitely divisible point processes are shown to solve a new integration by parts formula if the underlying potential is positive. T3 - Preprints des Instituts für Mathematik der Universität Potsdam - 2 (2013) 5 KW - Levy measure KW - cluster expansion KW - Gibbs perturbation KW - DLR equation Y1 - 2013 U6 - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:kobv:517-opus-64080 ER -