A nonself space approach to network anomaly detection

  • Authors:
  • Marek Ostaszewski;Franciszek Seredynski;Pascal Bouvry

  • Affiliations:
  • University of Podlasie, Institute of Computer Science, Siedlce, Poland;University of Podlasie, Institute of Computer Science, Siedlce, Poland and Polish-Japanese Institute of Information Technology, Warsaw, Poland and Polish Academy of Sciences, Institute of Computer ...;Luxembourg University, Faculty of Sciences, Technology and Communication, Luxembourg-Kirchberg, Luxembourg

  • Venue:
  • IPDPS'06 Proceedings of the 20th international conference on Parallel and distributed processing
  • Year:
  • 2006

Quantified Score

Hi-index 0.00

Visualization

Abstract

The paper presents an approach for the anomaly detection problem based on principles of immune systems. Flexibility and efficiency of the anomaly detection system are achieved by building a model of network behavior based on self-nonself space paradigm. Covering both self and nonself spaces by hyperrectangular structures is proposed. Structures corresponding to self-space are built using a training set from this space. Hyperrectangular detectors covering nonself space are created using niching genetic algorithm. Coevolutionary algorithm is proposed to enhance this process. Results of conducted experiments show a high quality of intrusion detection which outperforms the quality of recently proposed approach based on hypersphere representation of self-space.