Anomaly Detection Mid-Year Workshop
A Working Group in National Defense and Homeland Security at SAMSI

February 3, 2006

Hosted by the CDC and NCHS
Hyattsville, MD


 

Keynote Speakers

Carey E. Priebe
Mathematics and Statistics Department
Johns Hopkins University

Howard S. Burkom
National Security Technology Department
Applied Physics Laboratory
Johns Hopkins University

Donald E. Brown
Department of Systems and Information Engineering
University of Virginia

 


 

Presentations

Donald E. Brown, Keynote Presentation
Discrete Choice Models for Incident Prediction
Terrorist and criminal incidents take a number of forms, for instance, suicide bombings, explosive devices, sniper shootings and arson. Conventional approaches to mathematically understanding and predicting the locations of such attacks are to model them as point patterns and apply techniques from the extensive literature of point pattern analysis. Such methods, including density estimation and clustering techniques, typically focus on the spatial relationships of the attacks. While these approaches do occasionally reveal important spatial consistencies they often fail as predictive models. Their failure stems from an incorrect model of the underlying causal mechanism which is not a physical or natural phenomenon but a choice process by a motivated attacker. To capture this choice process requires an approach to understanding the preferences of the attackers. This presentation shows how this can be done using utility functions. These functions then form the basis for predictions of future attacks. This presentation discusses this approach and shows its usefulness to several problems in incident prediction.

Howard S. Burkom, Keynote Presentation
Adaptations of Data Modeling and Process Control for Prospective Biosurveillance
Syndromic surveillance involves the monitoring of available data sources for early warning of outbreaks of unspecified disease or of specified disease before the confirmation of identifying symptoms, with the objective to complement physician sentinel surveillance with false alarm rates acceptable to the public health infrastructure. Data sources include clinical data such as counts of syndrome-specific emergency department visits or physician office visits, and nonclinical data such as over-the-counter remedy sales and school/work absentee rates. A common approach among system developers has been to adapt chart-based methods from the field of statistical process control. Major obstacles to this approach are the evolving and often nonstationary input data streams, the uncertainty of the nature of the signal to be detected, and the presence of systematic or periodic behavior in the data background. Thus, robust detection performance, measured by timeliness and sensitivity at controlled alert rates, requires a combination of modeling and process control suitable to the characteristics of the monitored data. This presentation investigates such combination methods using standard evaluation techniques as well as focused techniques specific to the biosurveillance context. A discussion of generalized exponential smoothing methods will be given along with a performance comparison against a recently published regression modeling approach.

David A. Dickey
Introduction to Time Series and Intervention
In this shortened version of my workshop presentation, I will briefly talk about time series structures, show the time series representation for the exponentially weighted moving average operator that we have seen in some of our syndromic surveillance papers, and show some examples of intervention analysis, including a new example detailing the impact of the 9/11 terrorist strike on passenger volume at our local RDU airport.

Ryan Gill
Logistic Joinpoint Methods for Occupational Cohort Data
We describe logistic joinpoint methods for modeling incidence data. The model is well-suited for data where temporal changes in the functional pattern are suspected. We report the current progress and future plans in applying the methods to mortality data for the Louisville VC cohort of chemical workers.

Michael Last
Detecting Jumps in Piece-wise Locally Stationary Time Series
Finding jumps in piece-wise stationary time series is a problem considered by many authors. This model is too rigid for some applications, such as seismology. I will discuss a method for detecting jumps in piece-wise locally stationary time series, and look at applications to work in seismology and speech recognition.

Carey E. Priebe, Keynote Presentation
Scan Statistics on Enron Graphs
We introduce a theory of scan statistics on graphs and apply the ideas to the problem of anomaly detection in a time series of Enron email graphs.

Francisco Vera
Feature Based Density Estimation
Ideas to extend upon Donald E. Brown's criminal prediction model.

 

Program

Friday, February 3, 2006

9:30-9:45 Welcome
Alan F. Karr, National Institute for Statistical Sciences
Lawrence H. Cox, National Center for Health Statistics
9:45-10:15 Gauri S. Datta, University of Georgia
Scan Statistics
10:15-11:15 Keynote Speaker
Carey E. Priebe, Johns Hopkins
Scan Statistics on Enron Graphs
11:15-11:30 Coffee
11:30-12:30 Keynote Speaker
Howard S. Burkom, Johns Hopkins
Applied Physics Laboratory
Adaptations of Data Modeling and Process Control for Prospective Biosurveillance
12:30-1:30 Lunch
1:30-2:00 Ryan Gill, University of Louisville
Logistic Joinpoint Methods for Occupational Cohort Data
2:00-3:00 Keynote Speaker
Donald E. Brown, University of Virginia
Discrete Choice Models for Incident Prediction
3:00-3:15 Coffee
3:15-3:45 David A. Dickey, North Carolina State University
Introduction to Time Series and Intervention
3:45-4:15 Francisco Vera, National Institute for Statistical Sciences
Feature Based Density Estimation
4:15-4:45 Michael Last, National Institute for Statistical Sciences
Detecting Jumps in Piece-wise Locally Stationary Time Series
4:45-5:00 Coffee 
5:00-5:30 Group Discussion of Future Work

 

Contact & Directions

Those interested in attending should contact one of the hosts:

Myron Katzoff, [email protected]
Lawrence H. Cox, [email protected]
Joe F. Gonzalez, [email protected]

Participants will need to fax their lunch selection to SAMSI, Attn: Nicole Scott at 919-685-9360

 

The meeting will be held at the headquarters for the National Center for Health Statistics:

National Center for Health Statistics
Metro IV Building
3311 Toledo Road
Hyattsville, Maryland 20782

The information telephone number is (301) 458-4000

 

Metro Bus and Rail Directions
Information about metro bus and rail service is accessible through the Washington Metro Area Transit Authority Web site.

From Dulles International Airport
Take the Dulles Airport Access Road to exit 9 (I-495 toward Frederick/Bethesda). Continue on I-495 toward Baltimore for about 18 miles and take exit 28B (New Hampshire Avenue/Takoma Park). At the second traffic light, turn left onto Adelphi Road. Continue on Adelphi Road to the seventh traffic light and turn right onto Toledo road. The Metro IV Building will be one block on your left, just past the parking garage.

From National Airport
Follow the signs marked "Washington" to exit the airport onto George Washington Parkway. Stay on the Parkway for about 12 miles and take the exit marked Maryland/I-495. Continue on I-495 and take exit 28B (New Hampshire Avenue/Takoma Park). At the second traffic light, turn left onto Adelphi Road. Continue on Adelphi Road to the seventh traffic light and turn right onto Toledo road. The Metro IV Building will be one block on your left, just past the parking garage.

From Baltimore-Washington International Airport
Take Interstate 195 to the Baltimore Washington Parkway (Route 295) south toward Washington. Take the exit marked Riverdale/Hyattsville/New Carrollton (about 20 miles). Turn right at the first traffic light (Riverdale Road/Route 410). At the 6th traffic light, turn right onto Adelphi Road. At the first intersection, turn left onto Toledo Road. The Metro IV Building will be one block on your left, just past the parking garage.

Visitor Parking
Visitor parking is available in the Parking Garage A adjacent to the Metro IV Building. Enter at the visitor parking entrance on Toledo Road. Current rates are $2.00 for the first hour, $1.00 for subsequent hours, with a maximum of $7.00 per day.

Security System
The National Center for Health Statistics occupies the entire Metro IV Building. All visitors must proceed through a security check, sign in with the security guard personnel, and obtain a visitors pass. The security personnel will contact your NCHS point of contact who will escort you to your final destination.

 

Hotel Information

The Inn and Conference Center (managed by Marriott Hotels)
University of Maryland University College
3501 University Blvd E
Adelphi, MD
1 mile north of NCHS and very nice!
(301) 985-7300
Fax (301) 985-7517
www.idcide.com/hotels/md/marriott-inn-conference-center-adelphi.htm

Courtyard Greenbelt
6301 Golden Triangle Drive
Greenbelt, MD 20770
(301) 441-3311
Fax (301) 441-4978

Residence Inn Greenbelt
6320 Golden Triangle Drive
Greenbelt, MD 20770
(301) 982-1600
Fax (301) 982-6494

Courtyard New Carrollton Landover
8330 Corporate Drive
Landover, MD 20785
(301) 577-3373
Fax (301) 577-1780

Courtyard Silver Spring - Downtown
8506 Fenton Street
Silver Spring, MD 20910
(301) 589-4899
Fax (301) 589-4898

Marriott Courtyard Silver Spring
12521 Prosperity Drive
Silver Spring, MD 20904
(800) 228-9290

Residence Inn Marriott
12000 Plum Orchard Drive
Silver Spring, MD 20904
(301) 572-2322

Fairfield Inn Capital Beltway Marriott
4050 Powder Mill Rd
Beltsville, MD 20705
(800) 228-9290

Sheraton College Park
4095 Powder Mill Rd
Beltsville, MD 20705
(888) 625-5144

Hotels in Maryland (College park) for $50-$99 and more/night
http://maryland-hotels-x.com/50-99.99.html

Hotels in College Park, MD
http://maryland.hotelsonline.bz/collegepark.html

Marriott Hotel in Greenbelt, MD
http://www.idcide.com/hotels/md/marriott-greenbelt.htm

Comfort Inn in College Park, MD
http://www.idcide.com/hotels/md/comfort-inn-college-park.htm