A comparative study of real-valued negative selection to statistical anomaly detection techniques

  • Authors:
  • Thomas Stibor;Jonathan Timmis;Claudia Eckert

  • Affiliations:
  • Department of Computer Science, Darmstadt University of Technology;Departments of Electronics and Computer Science, University of York, Heslington, York;Department of Computer Science, Darmstadt University of Technology

  • Venue:
  • ICARIS'05 Proceedings of the 4th international conference on Artificial Immune Systems
  • Year:
  • 2005

Quantified Score

Hi-index 0.00

Visualization

Abstract

The (randomized) real-valued negative selection algorithm is an anomaly detection approach, inspired by the negative selection immune system principle. The algorithm was proposed to overcome scaling problems inherent in the hamming shape-space negative selection algorithm. In this paper, we investigate termination behavior of the real-valued negative selection algorithm with variable-sized detectors on an artificial data set. We then undertake an analysis and comparison of the classification performance on the high-dimensional KDD data set of the real-valued negative selection, a real-valued positive selection and statistical anomaly detection techniques. Results reveal that in terms of detection rate, real-valued negative selection with variable-sized detectors is not competitive to statistical anomaly detection techniques on the KDD data set. In addition, we suggest that the termination guarantee of the real-valued negative selection with variable-sized detectors is very sensitive to several parameters.