Multi-Agent Artificial Immune Systems (MAAIS) for Intrusion Detection: Abstraction from Danger Theory

Authors:
Chung-Ming Ou;C. R. Ou
Affiliations:
Department of Information Management, Kainan University, Taoyuan 338, Taiwan;Department of Electrical Engineering, Hsiuping Institute of Technology, Taichung, Taiwan 412
Venue:
KES-AMSTA '09 Proceedings of the Third KES International Symposium on Agent and Multi-Agent Systems: Technologies and Applications
Year:
2009

Citing 7
Cited 0

An Artificial Immune System Model for Multi Agents based Resource Discovery in Distributed Environments

ICICIC '06 Proceedings of the First International Conference on Innovative Computing, Information and Control - Volume 1
An agent based and biological inspired real-time intrusion detection and security model for computer network operations

Computer Communications
Multi-agents Artificial Immune System (MAAIS) Inspired by Danger Theory for Anomaly Detection

CISW '07 Proceedings of the 2007 International Conference on Computational Intelligence and Security Workshops
Integrating Innate and Adaptive Immunity for Worm Detection

WKDD '09 Proceedings of the 2009 Second International Workshop on Knowledge Discovery and Data Mining
Computational Intelligence in Information Assurance and Security

Computational Intelligence in Information Assurance and Security
Immune multi-agent active defense model for network intrusion

SEAL'06 Proceedings of the 6th international conference on Simulated Evolution And Learning
Cooperative automated worm response and detection immune ALgorithm(CARDINAL) inspired by t-cell immunity and tolerance

ICARIS'05 Proceedings of the 4th international conference on Artificial Immune Systems

Quantified Score

Hi-index	0.00

Visualization

Abstract

Danger theory-inspired Multi-agent artificial immune system (MAAIS) is applied to intrusion detection systems (IDS). Antigens are profiles of system calls while corresponding behaviors are regarded as signals. The intelligence behind such system is based on the danger theory while dentricit cells agents (DC agent) are emulated for innate immune subsystem and artificial T-cell agents (TC agent) are for adaptive immune subsystem. This IDS is based on the dual detections of DC agent for signals and TC agent for antigen, where each agent coordinates with other to calculate danger value (DV). According to DV, immune response for malicious behaviors is activated by either computer host or Security Operating Center (SOC).