Mireille Sarkiss

Hamdi Friji, Alexis Olivereau, Mireille Sarkiss

The last decades have seen a growth in the number of cyber-attacks with severe economic and privacy damages, which reveals the need for network intrusion detection approaches to assist in preventing cyber-attacks and reducing their risks. In this work, we propose a novel network representation as a graph of flows that aims to provide relevant topological information for the intrusion detection task, such as malicious behavior patterns, the relation between phases of multi-step attacks, and the relation between spoofed and pre-spoofed attackers activities. In addition, we present a Graph Neural Network (GNN) based framework responsible for exploiting the proposed graph structure to classify communication flows by assigning them a maliciousness score. The framework comprises three main steps that aim to embed nodes features and learn relevant attack patterns from the network representation. Finally, we highlight a potential data leakage issue with classical evaluation procedures and suggest a solution to ensure a reliable validation of intrusion detection systems performance. We implement the proposed framework and prove that exploiting the flow-based graph structure outperforms the classical machine learning-based and the previous GNN-based solutions.

Hossein Atrsaei, Mireille Sarkiss, Michèle Wigger

We study a quantized multiple-input multiple-output (MIMO) integrated sensing and communication (ISAC) system in which the communication and sensing receivers each apply analog spatial combining followed by scalar subtractive dithered quantization. This quantization model leads to an additive effective-noise representation with non-Gaussian noise. We derive upper and lower bounds on the capacity of this channel. Numerical results show that these bounds are tight at low signal-to-noise ratios (SNR) and saturate at high SNR due to finite-resolution quantization. They also show that, despite the effective noise being non-Gaussian, independent and identically distributed (i.i.d.) isotropic Gaussian signaling achieves rates close to capacity. Focusing on i.i.d. Gaussian signaling, this paper also presents a closed-form expression for the linear minimum mean-squared error (LMMSE) achieved under a Kronecker sensing-channel model. Numerical results show that the LMMSE also saturates at high SNR, where the saturation level increases as the spatial combining ratio decreases, and for combining ratios below one, saturation occurs even without quantization.

Hossein Atrsaei, Mireille Sarkiss, Michèle Wigger

We study the capacity of an additive white Gaussian noise (AWGN) channel followed by a subtractive dithered uniform quantizer. Under the Schuchman conditions and with negligible overload probability, the system admits an additive-noise representation in which the effective noise is the sum of Gaussian and uniform components. Capacity bounds are derived for this model when inputs are subject to an average-power constraint as well as a peak-amplitude constraint, where the latter accounts for the limited quantizer dynamic range. Specifically, a computable lower bound is obtained based on the entropy power inequality (EPI), using the maximum-entropy input under the above constraints. Tighter numerical lower bounds are derived using discrete input constellations with finite mass points. Finally, an upper bound is obtained by exploiting the fact that Gaussian distributions maximize entropy under a variance constraint. Numerical results show that, for a K-level quantizer, discrete constellations with K mass points already achieve near-optimal rates among the tested families. Moreover, our upper bound is close to the lower bounds in the moderate-SNR regime; it thus represents a good and simple capacity approximation in this regime.