Wenke Lee

Curriculum Vitae (as of May 1999)

Computer Science Department
Columbia University
450 Computer Science Building
New York, New York 10027

wenke@cs.columbia.edu
Office: (212) 939-7078
Home: (212) 666-7178

RESEARCH INTERESTS
Network Security, Distributed Data Mining, and Adaptive Systems I am interested in building adaptive network intrusion detection systems, and developing support systems for intelligent user interfaces. I am interested in developing data mining algorithms and systems that can efficiently compute accurate and concise behavior models from large amounts of system and user activity data.

EDUCATION

Ph.D. Computer Science, Columbia University 1994-1999
Ph.D. Thesis: A Data Mining Framework for Constructing Features and Models for Intrusion Detection Systems
Advisor: Professor Salvatore J. Stolfo

M.S. Computer Science, The City College of New York 1988-1990

B.S. Computer Science, Zhongshan University, Guangzhou, China 1984-1988

AWARDS and HONORS
Best Paper Award, Applied Research Category, the 5th ACM SIGKDD International Conference on Knowledge Discovery and Data Mining (KDD '99 )

Honorable mention (runner-up) for Best Paper Award, Applied Research Category, the 4th International Conference on Knowledge Discovery and Data Mining (KDD '98 )

Honorable mention (runner-up) for Best Paper Award, Applied Research Category, the 3rd International Conference on Knowledge Discovery and Data Mining (KDD '97 )


PUBLICATIONS

    PAPERS IN REFEREED JOURNALS
  1. Adaptive Intrusion Detection: a Data Mining Approach
    Wenke Lee, Sal Stolfo, and Kui Mok
    to appear in Journal Artificial Intelligence Review , Kluwer Academic Publishers, 1999


  2. REFEREED BOOK CHAPTERS
  3. Algorithms for Mining System Audit Data
    (Extended from our KDD' 98 paper)
    Wenke Lee, Sal Stolfo, and Kui Mok
    to appear in Data Retrieval and Data Mining , T. Y. Lin and N. Cercone (eds), Kluwer Academic Publishers, 1999


  4. Jadve: An Extensible Data Visualization Environment
    Wenke Lee and Naser Barghouti
    to appear in Object-Oriented Applications Frameworks , M. Fayad, D. Schmidt, and R. Johnson (eds), John Wiley & Sons, 1999


  5. PAPERS IN REFEREED CONFERENCES
  6. Mining in a Data-flow Environment: Experience in Network Intrusion Detection
    (Best Paper Award in Applied Research Category)
    Wenke Lee, Sal Stolfo, and Kui Mok
    to appear in the 5th ACM SIGKDD International Conference on Knowledge Discovery & Data Mining (KDD '99), San Diego, CA, August, 1999


  7. A Data Mining Framework for Building Intrusion Detection Models
    Wenke Lee, Sal Stolfo, and Kui Mok
    to appear in the 1999 IEEE Symposium on Security and Privacy , Oakland, CA, May 1999


  8. Mining Audit Data to Build Intrusion Detection Models
    (Honorable mention (runner-up) for Best Paper Award in Applied Research Category)
    Wenke Lee, Sal Stolfo, and Kui Mok
    In Proceedings of the Fourth International Conference on Knowledge Discovery and Data Mining (KDD '98), New York, NY, August 1998


  9. Data Mining Approaches for Intrusion Detection (PostScript)
    Wenke Lee and Sal Stolfo
    In Proceedings of the Seventh USENIX Security Symposium (SECURITY '98), San Antonio, TX, January 1998


  10. JAM: Java Agents for Meta-learning over Distributed Databases
    Sal Stolfo, Andreas Prodromidis, Shelley Tselepis, Wenke Lee, Dave Fan, and Phil Chan
    (Honorable mention (runner-up) for Best Paper Award in Applied Research Category)
    In Proceedings of the Third International Conference on Knowledge Discovery and Data Mining (KDD '97), Newport Beach, CA, August 1997


  11. Grappa: A GRAPh PAckage in Java
    Naser S. Barghouti, John Mocenigo, and Wenke Lee
    Fifth Annual Symposium on Graph Drawing (Graph Drawing '97), Rome, Italy, September 1997


  12. OzCare: A Workflow Automation System for Care Plans
    Wenke Lee, Gail Kaiser, Paul Clayton, and Eric Sherman
    In Proceedings of the American Medical Informatics Association Annual Fall Symposium, Washington DC, October 1996


  13. PAPERS IN REFEREED WORKSHOPS
  14. Towards Automatic Intrusion Detection using NFR
    Wenke Lee, Chris Park, and Sal Stolfo
    to appear in the 1st USENIX Workshop on Intrusion Detection and Network Monitoring, April 1999


  15. Learning Patterns from Unix Process Execution Traces for Intrusion Detection
    Wenke Lee, Sal Stolfo, and Phil Chan
    AAAI Workshop: AI Approaches to Fraud Detection and Risk Management, July 1997


  16. Credit Card Fraud Detection Using Meta-Learning: Issues and Initial Results
    Sal Stolfo, Dave Fan, Wenke Lee, Andreas Prodromidis, and Phil Chan
    AAAI Workshop: AI Approaches to Fraud Detection and Risk Management, July 1997


  17. Pay No Attention to the Man Behind the Curtain
    Gail Kaiser and Wenke Lee
    NSF Workshop on Workflow and Process Automation, May 1996


  18. Data Modeling and Management for Large Spatial Databases
    Wenke Lee
    In Proceedings of the Third International Workshop in GIS, Beijing, China, August 1993


  19. TECHNICAL REPORTS
  20. Interfacing Oz with the PCTE OMS: A Case Study of Integrating a Legacy System with a Standard Object Management System
    Wenke Lee and Gail Kaiser
    Technical Report TR CUCS-012-95


RESEARCH EXPERIENCE
Graduate Research Assistant, Columbia University 1996-present
Advisor: Professor Salvatore J. Stolfo.
Member of the DARPA and NSF sponsored JAM (Java Agents for Meta-Learning) project. Participated in the design of the JAM architecture. Implemented classifier display and analysis modules. Conducted experiments in building credit card fraud detection models using JAM.

Developed audit data pre-processing programs for tcpdump and BSM data. Implemented and extended several data mining algorithms, including association rules and frequent episodes, for mining audit data to build network intrusion detection models. Developed a translator to automatically construct NFR (Network Flight Recorder) "N-Code filters" for real-time intrusion detection from the learned rules. Participated in the 1998 DARPA Intrusion Detection Evaluation program. The results showed that our system was one of the best intrusion detection systems among those submitted to the evaluation.

Summer Research Staff Member, IBM T. J. Watson Research Center Summer 1997
Mentors: Dr. Jeff Kephart and Dr. Jakka Sairamesh.
Research in network-based information economy. Implemented a prototype multi-agent system to simulate the market dynamics of information brokering and filtering.

Summer Member of Technical Staff, AT&T Labs - Research Summer 1996
Mentor: Dr. Naser S. Barghouti.
Research in distributed data visualization environments. Designed and implemented Jadve , a Java-based distributed graph drawing and viewing system. Evaluated the advantages of using Java to develop distributed objected-oriented systems.

Graduate Research Assistant, Columbia University 1994-1996
Advisor: Professor Gail E. Kaiser.
Research in software development environments and workflow systems. Developed several modules of Oz, a collaborative workflow management system. Integrated Oz with the Object Management System component of PCTE (Portable Common Tools Environment). Applied Oz technologies to model and automate hospital patient "care plans".

TEACHING EXPERIENCE
Instructor, Columbia University Summer 1998
Taught Data Structures and Algorithms , a 4-point required course for the Computer Science major. Prepared lecture notes, assignments, and exams.

Teaching Assistant, Columbia University 1995-1996
Courses: Introduction to Software Engineering, Artificial Intelligence.
Lectured "software tools" sessions, prepared assignments and solutions, directed student project teams.


INDUSTRY EXPERIENCE
Consultant, Citicorp Technology Office 1996 (part-time)
Member of a consulting team. Developed a Java-based Intelligent E-Commerce System (U.S. Patent Number: 5920848).

Senior Software Engineer, Intergraph Corporation 1990-1994 (full-time)
Member of the Mapping Sciences software development team. Designed and implemented a modular GIS (Geographical Information System) environment, and a client/server spatial database management system, for both Unix and Windows NT platforms.

PATENTS
"Method and System for Using Intelligent Agents for Financial Transactions, Services, Accounting, and Advice" , Dan Schutzer, Will Foster, Huanrui Hu, Wenke Lee, Sal Stolfo, and Wei Fan (U.S. Patent Number: 5920848).

DEPARTMENTAL SERVICE
M.S. Admissions Committee 1998-present

Ph.D. Qualifying Exams Pre-tester 1995-1997


PROFESSIONAL ACTIVITIES
Reviewer for Addison-Wesley, and the Springer-Verlag Knowledge and Information Systems Journal.

REFERENCES
Prof. Salvatore J. Stolfo
Computer Science Department
Columbia University
450 Computer Science Building
New York, New York 10027
(212) 939-7080
sal@cs.columbia.edu


Prof. Alexander Tuzhilin
Information Systems Department
Stern School of Business
New York University
44 West 4th Street,
New York, New York 10012
(212) 998-0832
atuzhili@stern.nyu.edu


Prof. Henning G. Schulzrinne
Computer Science Department
Columbia University
450 Computer Science Building
New York, New York 10027
(212) 939-7042
hgs@cs.columbia.edu

Prof. Yechiam Yemini
Computer Science Department
Columbia University
450 Computer Science Building
New York, New York 10027
(212) 939-7123
yemini@cs.columbia.edu

Dr. Naser S. Barghouti
Bear Stearns & Co.
575 Lexington Ave.
New York, New York 10022
(212) 272-2624
naser@bear.com