diff --git a/BPV/qrs/images/aim.svg b/BPV/qrs/images/aim.svg
new file mode 100644
index 0000000..ce32948
--- /dev/null
+++ b/BPV/qrs/images/aim.svg
@@ -0,0 +1,1576 @@
+
+
diff --git a/BPV/qrs/images/aim_p1.svg b/BPV/qrs/images/aim_p1.svg
new file mode 100644
index 0000000..12496f7
--- /dev/null
+++ b/BPV/qrs/images/aim_p1.svg
@@ -0,0 +1,826 @@
+
+
diff --git a/BPV/qrs/images/aim_p2.svg b/BPV/qrs/images/aim_p2.svg
new file mode 100644
index 0000000..90e5cbd
--- /dev/null
+++ b/BPV/qrs/images/aim_p2.svg
@@ -0,0 +1,1000 @@
+
+
diff --git a/BPV/qrs/images/setup.svg b/BPV/qrs/images/setup.svg
new file mode 100644
index 0000000..1962aab
--- /dev/null
+++ b/BPV/qrs/images/setup.svg
@@ -0,0 +1,136 @@
+
+
+
+
diff --git a/BPV/qrs/images/training_unique.svg b/BPV/qrs/images/training_unique.svg
new file mode 100644
index 0000000..623c68e
--- /dev/null
+++ b/BPV/qrs/images/training_unique.svg
@@ -0,0 +1,3224 @@
+
+
+
+
diff --git a/BPV/qrs/images/training_unique_p1.svg b/BPV/qrs/images/training_unique_p1.svg
new file mode 100644
index 0000000..5b834c6
--- /dev/null
+++ b/BPV/qrs/images/training_unique_p1.svg
@@ -0,0 +1,822 @@
+
+
+
+
diff --git a/BPV/qrs/images/training_unique_p2.svg b/BPV/qrs/images/training_unique_p2.svg
new file mode 100644
index 0000000..9632861
--- /dev/null
+++ b/BPV/qrs/images/training_unique_p2.svg
@@ -0,0 +1,1233 @@
+
+
+
+
diff --git a/BPV/qrs/images/training_unique_p3.svg b/BPV/qrs/images/training_unique_p3.svg
new file mode 100644
index 0000000..8b3cbed
--- /dev/null
+++ b/BPV/qrs/images/training_unique_p3.svg
@@ -0,0 +1,1245 @@
+
+
+
+
diff --git a/BPV/qrs/images/wein_p1.svg b/BPV/qrs/images/wein_p1.svg
new file mode 100644
index 0000000..336bd7a
--- /dev/null
+++ b/BPV/qrs/images/wein_p1.svg
@@ -0,0 +1,98 @@
+
+
+
+
diff --git a/BPV/qrs/images/wein_p2.svg b/BPV/qrs/images/wein_p2.svg
new file mode 100644
index 0000000..db7b339
--- /dev/null
+++ b/BPV/qrs/images/wein_p2.svg
@@ -0,0 +1,114 @@
+
+
+
+
diff --git a/BPV/qrs/presentation.typ b/BPV/qrs/presentation.typ
index 3155a45..29d0cac 100644
--- a/BPV/qrs/presentation.typ
+++ b/BPV/qrs/presentation.typ
@@ -13,47 +13,136 @@
#title-slide(
author: [Arthur Grisel-Davy, Sebastian Fischmeister],
- title: "Independent Boot Process Verification using Side-Channel Power Analysis",
+ title: text(size: 30pt, weight: 400)[Independent Boot Process Verification using Side-Channel Power Analysis],
subtitle: "",
date: "University of Waterloo",
extra: "agriseld@uwaterloo.ca"
)
#slide(title: "Introduction")[
+ #only(1)[#image("images/wein_p1.svg", width: 100%)]
+ #only(2)[#image("images/wein_p2.svg", width: 100%)]
]
#slide(title: "Overview")[
#image("images/illustration.svg", width: 100%)
]
+#slide(title: "Capture System")[
+ #align(center)[
+ #image("images/setup.svg", width: 80%)
+ ]
+]
+
#slide(title: "BPV Model")[
+#align(center)[
+ #image("images/training_unique_p1.svg", height: 100%)
+]
]
#slide(title: "Multi-Model Support")[
+#align(center)[
+ #only(1)[#image("images/training_unique_p2.svg", height: 100%)]
+ #only(2)[#image("images/training_unique_p3.svg", height: 100%)]
]
+]
+
#focus-slide()[
Test Cases
]
-#slide(title: "Test Case 1")[
-
+#slide(title: "Test Case 1 - Networking Devices")[
+#figure(
+ placement: auto,
+ tablex(
+ columns: (25%,25%,25%,25%),
+ align: (left+horizon,right+horizon,right+horizon,right+horizon),
+ auto-vlines: false,
+ repeat-header: false,
+ [*Device*], [*Original*], [*Change 1*], [*Change 2*],
+ [TP-Link\ Switch], [20200805], [20200109], [X],
+ [HP Procurve\ Switch], [H.10.119], [H.10.117], [X],
+ [Asus Router], [Latest EOM], [OpenWrt\ v21.02.2], [OpenWrt\ v21.02.0],
+ [Linksys\ Router], [Latest EOM], [OpenWrt\ v21.02.2], [OpenWrt\ v21.02.0],
+ ),
+ supplement: [Table],
+ kind: "table",
+ caption: [Machines used for the experiment and the changes applied.],
+)
]
-//#slide(title: "Table of contents")[
-// #metropolis-outline
-//]
+#slide(title: "Test Case 1 - Results")[
+ #figure(
+ placement: auto,
+ tablex(
+ columns: (30%,30%),
+ auto-vlines: false,
+ align: (left, right),
+ [*Machine*], [*$F_1$ Score*],
+ [TP-Link switch], [0.87],
+ [HP switch], [0.98],
+ [Asus router], [1.00],
+ [Linksys router], [0.92]
+ ),
+ supplement: [Table],
+ kind: "table",
+ caption: [Results of the detection of anomalous firmwares on networking devices.]
+ )
+]
+#slide(title: "Test Case 2 - Drone")[
+Five Scenarios:
+
+- *x2 Nominal*: Before and after modifications.
+- *Low Battery*: Supplied voltage below 11V
+- *x2 Malfunctioning Firmware*: Bugs in bootloader and battery module.
+]
+
+#slide(title: "Test Case 2 - Results")[
+#figure(
+ tablex(
+ auto-vlines: false,
+ align: (left, right, right),
+ columns: (30%,20%,30%),
+ [*Scenario*],[*Accuracy*], [*Nbr. of Samples*],
+ [Original],[1],[98],
+ [Compiled],[1],[49],
+ [Low Battery],[1],[44],
+ [Bootloader Bug],[1],[50],
+ [Battery Module Bug], [0.082],[39],
+ ),
+ supplement: [Table],
+ kind: "table",
+ caption: [Results of the intrusion detection on the drone.]
+)
+]
+
+// if no results, present the setup and say why this is interesting and versatile
+#slide(title: "Test Case 3 - General Purpose Computer")[
+#image("images/l3-setup.svg", width: 100%)
+]
+
+#slide(title: "Test Case 3 - Results")[
+Known attack (boot on external device) #sym.arrow Optimised threshold #sym.arrow $F_1$ Score: #text(weight: "bold")[100%]
+]
+
+#slide(title: "Anomaly Infused Model (AIM)")[
+#align(center)[
+ #only(1)[#image("images/aim_p1.svg", height:120%)]
+ #only(2)[#image("images/aim_p2.svg", height:120%)]
+]
+]
+
+#slide(title: "Future Work")[
+- Improve automatic computation of optimal threshold (anomaly generation)
+- Evaluate performances with a wider variety of attacks.
+]
#focus-slide()[
-#align(center)[Thank you for your attention.]
+Thank you for your attention!
+
+#text(size: 20pt)[Contact: #text(weight: "bold")[agriseld\@uwaterloo.ca]]
]
-
-
-//#new-section-slide([Second section])
-//
-//#focus-slide[
-// Wake up!
-//]
diff --git a/DSD/presentation_baradas/images/2d_p1.svg b/DSD/presentation_baradas/images/2d_p1.svg
new file mode 100644
index 0000000..511156e
--- /dev/null
+++ b/DSD/presentation_baradas/images/2d_p1.svg
@@ -0,0 +1,97 @@
+
+
+
+
diff --git a/DSD/presentation_baradas/images/2d_p2.svg b/DSD/presentation_baradas/images/2d_p2.svg
new file mode 100644
index 0000000..b1c7994
--- /dev/null
+++ b/DSD/presentation_baradas/images/2d_p2.svg
@@ -0,0 +1,163 @@
+
+
+
+
diff --git a/DSD/presentation_baradas/images/2d_p3.svg b/DSD/presentation_baradas/images/2d_p3.svg
new file mode 100644
index 0000000..993fe40
--- /dev/null
+++ b/DSD/presentation_baradas/images/2d_p3.svg
@@ -0,0 +1,233 @@
+
+
+
+
diff --git a/DSD/presentation_baradas/images/2d_p4.svg b/DSD/presentation_baradas/images/2d_p4.svg
new file mode 100644
index 0000000..3997026
--- /dev/null
+++ b/DSD/presentation_baradas/images/2d_p4.svg
@@ -0,0 +1,246 @@
+
+
+
+
diff --git a/DSD/presentation_baradas/images/2d_p5.svg b/DSD/presentation_baradas/images/2d_p5.svg
new file mode 100644
index 0000000..c86f8fb
--- /dev/null
+++ b/DSD/presentation_baradas/images/2d_p5.svg
@@ -0,0 +1,182 @@
+
+
+
+
diff --git a/DSD/presentation_baradas/images/2d_p6.svg b/DSD/presentation_baradas/images/2d_p6.svg
new file mode 100644
index 0000000..1a52953
--- /dev/null
+++ b/DSD/presentation_baradas/images/2d_p6.svg
@@ -0,0 +1,182 @@
+
+
+
+
diff --git a/DSD/presentation_baradas/images/2d_view.svg b/DSD/presentation_baradas/images/2d_view.svg
new file mode 100644
index 0000000..35ae60e
--- /dev/null
+++ b/DSD/presentation_baradas/images/2d_view.svg
@@ -0,0 +1,1072 @@
+
+
+
+
diff --git a/DSD/presentation_baradas/images/2w_experiment.svg b/DSD/presentation_baradas/images/2w_experiment.svg
new file mode 100644
index 0000000..5cff0e5
--- /dev/null
+++ b/DSD/presentation_baradas/images/2w_experiment.svg
@@ -0,0 +1,556 @@
+
+
+
+
diff --git a/DSD/presentation_baradas/images/Page 11.svg b/DSD/presentation_baradas/images/Page 11.svg
new file mode 100644
index 0000000..404c029
--- /dev/null
+++ b/DSD/presentation_baradas/images/Page 11.svg
@@ -0,0 +1,186 @@
+
+
+
+
diff --git a/DSD/presentation_baradas/images/Page 13.svg b/DSD/presentation_baradas/images/Page 13.svg
new file mode 100644
index 0000000..80c3624
--- /dev/null
+++ b/DSD/presentation_baradas/images/Page 13.svg
@@ -0,0 +1,506 @@
+
+
+
+
diff --git a/DSD/presentation_baradas/images/aproach_all.svg b/DSD/presentation_baradas/images/aproach_all.svg
new file mode 100644
index 0000000..8e6122c
--- /dev/null
+++ b/DSD/presentation_baradas/images/aproach_all.svg
@@ -0,0 +1,5138 @@
+
+
+
+
diff --git a/DSD/presentation_baradas/images/aproach_p1.svg b/DSD/presentation_baradas/images/aproach_p1.svg
new file mode 100644
index 0000000..dcd613c
--- /dev/null
+++ b/DSD/presentation_baradas/images/aproach_p1.svg
@@ -0,0 +1,75 @@
+
+
+
+
diff --git a/DSD/presentation_baradas/images/aproach_p2.svg b/DSD/presentation_baradas/images/aproach_p2.svg
new file mode 100644
index 0000000..f3b8e3d
--- /dev/null
+++ b/DSD/presentation_baradas/images/aproach_p2.svg
@@ -0,0 +1,199 @@
+
+
+
+
diff --git a/DSD/presentation_baradas/images/aproach_p3.svg b/DSD/presentation_baradas/images/aproach_p3.svg
new file mode 100644
index 0000000..d226aa0
--- /dev/null
+++ b/DSD/presentation_baradas/images/aproach_p3.svg
@@ -0,0 +1,202 @@
+
+
+
+
diff --git a/DSD/presentation_baradas/images/aproach_p4.svg b/DSD/presentation_baradas/images/aproach_p4.svg
new file mode 100644
index 0000000..0b988b1
--- /dev/null
+++ b/DSD/presentation_baradas/images/aproach_p4.svg
@@ -0,0 +1,275 @@
+
+
+
+
diff --git a/DSD/presentation_baradas/images/aproach_p5.svg b/DSD/presentation_baradas/images/aproach_p5.svg
new file mode 100644
index 0000000..b5961ee
--- /dev/null
+++ b/DSD/presentation_baradas/images/aproach_p5.svg
@@ -0,0 +1,392 @@
+
+
+
+
diff --git a/DSD/presentation_baradas/images/aproach_p6.svg b/DSD/presentation_baradas/images/aproach_p6.svg
new file mode 100644
index 0000000..fd8da32
--- /dev/null
+++ b/DSD/presentation_baradas/images/aproach_p6.svg
@@ -0,0 +1,436 @@
+
+
+
+
diff --git a/DSD/presentation_baradas/images/aproach_p7.svg b/DSD/presentation_baradas/images/aproach_p7.svg
new file mode 100644
index 0000000..0c36c73
--- /dev/null
+++ b/DSD/presentation_baradas/images/aproach_p7.svg
@@ -0,0 +1,450 @@
+
+
+
+
diff --git a/DSD/presentation_baradas/images/aproach_p8.svg b/DSD/presentation_baradas/images/aproach_p8.svg
new file mode 100644
index 0000000..673781b
--- /dev/null
+++ b/DSD/presentation_baradas/images/aproach_p8.svg
@@ -0,0 +1,385 @@
+
+
+
+
diff --git a/DSD/presentation_baradas/images/aproach_p9.svg b/DSD/presentation_baradas/images/aproach_p9.svg
new file mode 100644
index 0000000..b6a3c8a
--- /dev/null
+++ b/DSD/presentation_baradas/images/aproach_p9.svg
@@ -0,0 +1,407 @@
+
+
+
+
diff --git a/DSD/presentation_baradas/images/areas.svg b/DSD/presentation_baradas/images/areas.svg
new file mode 100644
index 0000000..f74293a
--- /dev/null
+++ b/DSD/presentation_baradas/images/areas.svg
@@ -0,0 +1,742 @@
+
+
+
+
diff --git a/DSD/presentation_baradas/images/dsd_acc.svg b/DSD/presentation_baradas/images/dsd_acc.svg
new file mode 100644
index 0000000..3807ce4
--- /dev/null
+++ b/DSD/presentation_baradas/images/dsd_acc.svg
@@ -0,0 +1,1747 @@
+
+
diff --git a/DSD/presentation_baradas/images/metric.svg b/DSD/presentation_baradas/images/metric.svg
new file mode 100644
index 0000000..e9d6afe
--- /dev/null
+++ b/DSD/presentation_baradas/images/metric.svg
@@ -0,0 +1,796 @@
+
+
diff --git a/DSD/presentation_baradas/images/overview.svg b/DSD/presentation_baradas/images/overview.svg
new file mode 100644
index 0000000..2e7c049
--- /dev/null
+++ b/DSD/presentation_baradas/images/overview.svg
@@ -0,0 +1,6007 @@
+
+
+
+
diff --git a/DSD/presentation_baradas/images/overview_test.svg b/DSD/presentation_baradas/images/overview_test.svg
new file mode 100644
index 0000000..87deaea
--- /dev/null
+++ b/DSD/presentation_baradas/images/overview_test.svg
@@ -0,0 +1,3208 @@
+
+
+
+
diff --git a/DSD/presentation_baradas/images/preds.svg b/DSD/presentation_baradas/images/preds.svg
new file mode 100644
index 0000000..fbb3c3b
--- /dev/null
+++ b/DSD/presentation_baradas/images/preds.svg
@@ -0,0 +1,374 @@
+
+
diff --git a/DSD/presentation_baradas/images/proof.svg b/DSD/presentation_baradas/images/proof.svg
new file mode 100644
index 0000000..7820a73
--- /dev/null
+++ b/DSD/presentation_baradas/images/proof.svg
@@ -0,0 +1,41946 @@
+
+
+
+
diff --git a/DSD/presentation_baradas/images/rules_pipeline.svg b/DSD/presentation_baradas/images/rules_pipeline.svg
new file mode 100644
index 0000000..be38969
--- /dev/null
+++ b/DSD/presentation_baradas/images/rules_pipeline.svg
@@ -0,0 +1,250 @@
+
+
+
+
diff --git a/DSD/presentation_baradas/images/wein.svg b/DSD/presentation_baradas/images/wein.svg
new file mode 100644
index 0000000..f1b2eec
--- /dev/null
+++ b/DSD/presentation_baradas/images/wein.svg
@@ -0,0 +1,477 @@
+
+
+
+
diff --git a/DSD/presentation_baradas/images/wein_p1.svg b/DSD/presentation_baradas/images/wein_p1.svg
new file mode 100644
index 0000000..4a638a2
--- /dev/null
+++ b/DSD/presentation_baradas/images/wein_p1.svg
@@ -0,0 +1,55 @@
+
+
+
+
diff --git a/DSD/presentation_baradas/images/wein_p2.svg b/DSD/presentation_baradas/images/wein_p2.svg
new file mode 100644
index 0000000..c8a7b2e
--- /dev/null
+++ b/DSD/presentation_baradas/images/wein_p2.svg
@@ -0,0 +1,70 @@
+
+
+
+
diff --git a/DSD/presentation_baradas/images/wein_p3.svg b/DSD/presentation_baradas/images/wein_p3.svg
new file mode 100644
index 0000000..2933101
--- /dev/null
+++ b/DSD/presentation_baradas/images/wein_p3.svg
@@ -0,0 +1,78 @@
+
+
+
+
diff --git a/DSD/presentation_baradas/images/wein_p4.svg b/DSD/presentation_baradas/images/wein_p4.svg
new file mode 100644
index 0000000..6f88b88
--- /dev/null
+++ b/DSD/presentation_baradas/images/wein_p4.svg
@@ -0,0 +1,74 @@
+
+
+
+
diff --git a/DSD/presentation_baradas/images/wein_p5.svg b/DSD/presentation_baradas/images/wein_p5.svg
new file mode 100644
index 0000000..552b36b
--- /dev/null
+++ b/DSD/presentation_baradas/images/wein_p5.svg
@@ -0,0 +1,106 @@
+
+
+
+
diff --git a/DSD/presentation_baradas/images/wein_p6.svg b/DSD/presentation_baradas/images/wein_p6.svg
new file mode 100644
index 0000000..932fd0f
--- /dev/null
+++ b/DSD/presentation_baradas/images/wein_p6.svg
@@ -0,0 +1,81 @@
+
+
+
+
diff --git a/DSD/presentation_baradas/presentation.typ b/DSD/presentation_baradas/presentation.typ
new file mode 100644
index 0000000..5c14f09
--- /dev/null
+++ b/DSD/presentation_baradas/presentation.typ
@@ -0,0 +1,196 @@
+#import "@preview/polylux:0.3.1": *
+#import themes.metropolis: *
+#import "@preview/tablex:0.0.5": tablex, hlinex, vlinex, colspanx, rowspanx
+
+#show: metropolis-theme.with(
+ footer: [CC BY-SA 4.0 Arthur Grisel-Davy]
+)
+
+#set text(font: "Fira Sans", weight: "light", size: 20pt)
+#show math.equation: set text(font: "Fira Math")
+#set strong(delta: 100)
+#set par(justify: true)
+
+#title-slide(
+ author: [Arthur Grisel-Davy, Sebastian Fischmeister],
+ title: text(size: 30pt, weight: 500)[MAD: One-Shot Machine Activity Detector for Physics-Based Cyber Security],
+ subtitle: "",
+ date: "University of Waterloo",
+ extra: "agriseld@uwaterloo.ca"
+)
+
+//#slide(title: "Table of contents")[
+// #metropolis-outline
+//]
+
+#slide(title: "Introduction")[
+ #only(1)[#figure(image("images/wein_p1.svg", height: 100%))]
+ #only(2)[#figure(image("images/wein_p2.svg", height: 100%))]
+ #only(3)[#figure(image("images/wein_p3.svg", height: 100%))]
+ #only(4)[#figure(image("images/wein_p4.svg", height: 100%))]
+ #only(5)[#figure(image("images/wein_p5.svg", height: 100%))]
+]
+
+
+#slide(title: "Problem Statement")[
+#align(center)[Given a #text(fill: blue, weight:400 )[discretized time series $t$] and a #text(fill: red, weight:400)[set of patterns $P=\{P_1, dots.h, P_n\}$], identify a mapping $m: NN arrow.r P union lambda$ such that every sample $t[i]$ maps to a pattern in $P union lambda$ with the condition that the sample #text(fill: purple, weight: 400)[matches] an occurrence of the pattern in $t$.]
+]
+
+#slide(title: "Constraints")[
+- Only one pattern is available per state/label.
+- Patterns are not necessarily all the same length.
+]
+
+#slide(title: "Proposed Approach")[
+ #only(1)[#figure(image("images/aproach_p1.svg", width: 100%))]
+ #only(2)[#figure(image("images/aproach_p2.svg", width: 100%))]
+ #only(3)[#figure(image("images/aproach_p3.svg", width: 100%))]
+ #only(4)[#figure(image("images/aproach_p4.svg", width: 100%))]
+ #only(5)[#figure(image("images/aproach_p5.svg", width: 100%))]
+ #only(6)[#figure(image("images/aproach_p6.svg", width: 100%))]
+ #only(7)[#figure(image("images/aproach_p7.svg", width: 100%))]
+ #only(8)[#figure(image("images/aproach_p8.svg", width: 100%))]
+ #only(9)[#figure(image("images/aproach_p9.svg", width: 100%))]
+]
+
+#slide(title: "Proposed Approcah")[
+#align(center)[
+#text(weight: "bold")[Metric:] The distance between a sample and a pattern is the minimum normalized distance between the pattern and any pattern-length substring that includes the samples.
+#v(1cm)
+#text(weight: "bold")[Decision:] Each sample receives the label of the closest training pattern.
+]
+]
+
+#slide(title: "2D Interpretation")[
+
+ #only(1)[#figure(image("images/2d_p1.svg", width: 100%))]
+ #only(2)[#figure(image("images/2d_p2.svg", width: 100%))]
+ #only(3)[#figure(image("images/2d_p3.svg", width: 100%))]
+ #only(4)[#figure(image("images/2d_p4.svg", width: 100%))]
+ #only(5)[#figure(image("images/2d_p5.svg", width: 100%))]
+]
+
+#slide(title: "Question")[
+#align(center)[Should the algorithm #text(weight: "bold")[always] choose a label?]
+]
+
+#slide(title: "2D Interpretation")[
+
+ #figure(image("images/2d_p6.svg", width: 100%))
+]
+
+#slide(title: "Parameter "+sym.alpha)[
+ #figure(
+ image("images/areas.svg", width: 100%)
+ )
+#align(center)[With $alpha lt.triple 2$, the algorithm acquire novelty-detection capability.]
+]
+
+#slide(title: "Performance Metric")[
+#figure(
+ image("images/metric.svg", width: 100%)
+ )
+]
+
+
+#slide(title: "Case Study 1")[
+
+#align(center)[
+#figure(
+tablex(
+ columns: (auto, auto, auto),
+ auto-vlines: false,
+ repeat-header: false,
+ align: (left+horizon,right+horizon,right+horizon),
+ [#text(weight:"bold")[Dataset]], [#text(weight: "bold")[Length]], [#text(weight: "bold")[Number of Occurences]],
+ [NUCPC-0], [22700], [11],
+ [NUCPC-1], [7307], [8],
+ [Generated], [15540], [18],
+ [WAP-ASUS], [26880], [18],
+ [WAP-LINKSYS], [22604], [18],
+ [REFIT-H4A4], [5366], [17],
+ [REFIT-H4A1], [100000], [142]
+),
+caption: "Results of the case study 1",
+supplement: none,
+)
+]
+
+]
+#slide(title: "Case Study 1 - Results")[
+#figure(
+ image("images/dsd_acc.svg", height: 100%)
+ )
+]
+
+
+#slide(title: "Case Study 2")[
+#image("images/rules_pipeline.svg", width:100%)
+]
+
+#slide(title: "Case Study 2")[
+#align(center)[
+#image("images/2w_experiment.svg", width: 90%)
+
+#tablex(
+ columns: (auto, auto, auto),
+ auto-vlines: false,
+ repeat-header: false,
+ align: (left+horizon,right+horizon,right+horizon),
+ [#text(weight:"bold")[Rule ID]], [#text(weight: "bold")[Rule]], [#text(weight: "bold")[Threat]],
+ [1], ["SLEEP" state only], [Machine takeover, Botnet, Rogue employee],
+ [2], [No "SLEEP" for more than 8m], [System malfunction],
+ [3], [One "REBOOT"], [APT, Backdoors],
+ [4], [No "HIGH" for more than 30s], [Crypto mining, Ransomware, Botnet],
+)
+]
+]
+
+
+#slide(title: "Case Study 2")[
+#figure(
+ image("images/preds.svg", height: 100%)
+ )
+]
+
+#slide(title: "Case Study 2 - Results")[
+#align(center)[
+#figure(
+tablex(
+ columns: (auto, auto, auto),
+ auto-vlines: false,
+ repeat-header: false,
+ align: (left+horizon,right+horizon,right+horizon),
+ [#text(weight:"bold")[Rule]], [#text(weight: "bold")[Violation Ratio]], [#text(weight: "bold")[Micro-$F_1$]],
+ [Night Sleep], [0.33], [1.0],
+ [Work Hours], [0.3], [1.0],
+ [Reboot], [0.48], [1.0],
+ [No Long High], [0.75], [1.0],
+),
+caption: "Results of the case study 2",
+supplement: none,
+)
+]
+]
+
+
+#slide(title: "Future Work")[
+- Automatic Training (Patterns Extraction) #pause
+- Multivariate Support
+]
+
+//#slide(title: "Conclusion")[
+// #figure(image("images/wein_p6.svg", height: 100%))
+// //Side-channel can be a relevant, independent and actionable source of information for IDS.
+//]
+
+
+#focus-slide()[
+Thank you for your attention!
+
+#text(size: 20pt)[Contact: #text(weight: "bold")[agriseld\@uwaterloo.ca]]
+]
+
+#slide(title: "Errors of 1NN")[
+ #figure(image("images/proof.svg", height: 100%))
+]
diff --git a/DSD/qrs/presentation/images/proof.svg b/DSD/qrs/presentation/images/proof.svg
new file mode 100644
index 0000000..7820a73
--- /dev/null
+++ b/DSD/qrs/presentation/images/proof.svg
@@ -0,0 +1,41946 @@
+
+
+
+
diff --git a/DSD/qrs/presentation/images/wein.svg b/DSD/qrs/presentation/images/wein.svg
index f8f07bb..f1b2eec 100644
--- a/DSD/qrs/presentation/images/wein.svg
+++ b/DSD/qrs/presentation/images/wein.svg
@@ -8,7 +8,7 @@
height="269.33334"
viewBox="0 0 521.33331 269.33334"
sodipodi:docname="wein.svg"
- inkscape:version="1.3 (0e150ed6c4, 2023-07-21)"
+ inkscape:version="1.2.2 (b0a8486541, 2022-12-01)"
xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape"
xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd"
xmlns="http://www.w3.org/2000/svg"
@@ -59,13 +59,13 @@
inkscape:pagecheckerboard="0"
inkscape:deskcolor="#d1d1d1"
showgrid="false"
- inkscape:zoom="0.39706941"
- inkscape:cx="1042.6389"
- inkscape:cy="196.43921"
+ inkscape:zoom="1.1344973"
+ inkscape:cx="2877.0451"
+ inkscape:cy="264.43429"
inkscape:window-width="1920"
- inkscape:window-height="1026"
+ inkscape:window-height="1131"
inkscape:window-x="0"
- inkscape:window-y="26"
+ inkscape:window-y="0"
inkscape:window-maximized="1"
inkscape:current-layer="g1">
+
Network Traffic
+ style="stroke-width:0.672497;fill:#ff0000;-inkscape-font-specification:'STIX Two Text';font-family:'STIX Two Text';font-weight:normal;font-style:normal;font-stretch:normal;font-variant:normal">Network Traffic
Actionability
CPU, Disk, RAM,CPU, Disk, RAM,Files...
Actionability
Power Consumption
Actionability
Power Consumption
+
+
+
+
+
+
+
+ Actionability
+ Power Consumption
+
+
diff --git a/DSD/qrs/presentation/images/wein_p2.svg b/DSD/qrs/presentation/images/wein_p2.svg
index 5a1729b..c8a7b2e 100644
--- a/DSD/qrs/presentation/images/wein_p2.svg
+++ b/DSD/qrs/presentation/images/wein_p2.svg
@@ -58,13 +58,13 @@
d="m 799.13086,117.70898 a 69.496323,68.687119 0 0 0 -64.66211,43.98633 69.496323,68.687119 0 0 0 26.89648,5.47852 69.496323,68.687119 0 0 0 64.69922,-44.08789 69.496323,68.687119 0 0 0 -26.93359,-5.37696 z" />
Network Traffic
+ style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-family:'STIX Two Text';-inkscape-font-specification:'STIX Two Text';fill:#ff0000;stroke-width:0.672497">Network Traffic
diff --git a/DSD/qrs/presentation/images/wein_p3.svg b/DSD/qrs/presentation/images/wein_p3.svg
index d6f9727..2933101 100644
--- a/DSD/qrs/presentation/images/wein_p3.svg
+++ b/DSD/qrs/presentation/images/wein_p3.svg
@@ -4,9 +4,9 @@
diff --git a/DSD/qrs/presentation/images/wein_p6.svg b/DSD/qrs/presentation/images/wein_p6.svg
index 77df003..932fd0f 100644
--- a/DSD/qrs/presentation/images/wein_p6.svg
+++ b/DSD/qrs/presentation/images/wein_p6.svg
@@ -4,118 +4,78 @@
diff --git a/DSD/qrs/presentation/presentation.typ b/DSD/qrs/presentation/presentation.typ
index a4ee2c5..5af6e45 100644
--- a/DSD/qrs/presentation/presentation.typ
+++ b/DSD/qrs/presentation/presentation.typ
@@ -13,7 +13,7 @@
#title-slide(
author: [Arthur Grisel-Davy, Sebastian Fischmeister],
- title: "MAD: One-Shot Machine Activity Detector for Physics-Based Cyber Security",
+ title: text(size: 30pt, weight: 500)[MAD: One-Shot Machine Activity Detector for Physics-Based Cyber Security],
subtitle: "",
date: "University of Waterloo",
extra: "agriseld@uwaterloo.ca"
@@ -169,25 +169,23 @@ supplement: none,
]
-#slide(title: "Futur Work")[
+#slide(title: "Future Work")[
- Automatic Training (Patterns Extraction) #pause
-- Multivariate Support #pause
-- More Experiments
+- Multivariate Support
]
-#slide(title: "Conclusion")[
- #figure(image("images/wein_p6.svg", height: 100%))
- //Side-channel can be a relevant, independent and actionable source of information for IDS.
-]
+//#slide(title: "Conclusion")[
+// #figure(image("images/wein_p6.svg", height: 100%))
+// //Side-channel can be a relevant, independent and actionable source of information for IDS.
+//]
#focus-slide()[
-#align(center)[Thank you for your attention.]
+Thank you for your attention!
+
+#text(size: 20pt)[Contact: #text(weight: "bold")[agriseld\@uwaterloo.ca]]
]
-
-//#new-section-slide([Second section])
-//
-//#focus-slide[
-// Wake up!
-//]
+#slide(title: "Errors of 1NN")[
+ #figure(image("images/proof.svg", height: 100%))
+]
diff --git a/clip/schematic.svg b/clip/schematic.svg
new file mode 100644
index 0000000..9868104
--- /dev/null
+++ b/clip/schematic.svg
@@ -0,0 +1,442 @@
+
+
+
+