A negative selection approach to intrusion detection

  • Authors:
  • Patricia Mostardinha;Bruno Filipe Faria;André Zúquete;Fernão Vistulo de Abreu

  • Affiliations:
  • Departamento de Física, Universidade de Aveiro, Aveiro, Portugal, Departamento de Electrónica, Telecomunicações e Informática, I3N Institute for Nanostructures, Nanomodell ...;Departamento de Física, Universidade de Aveiro, Aveiro, Portugal, Departamento de Electrónica, Telecomunicações e Informática, I3N Institute for Nanostructures, Nanomodell ...;Departamento de Física, Universidade de Aveiro, Aveiro, Portugal, Departamento de Electrónica, Telecomunicações e Informática, I3N Institute for Nanostructures, Nanomodell ...;Departamento de Física, Universidade de Aveiro, Aveiro, Portugal, Departamento de Electrónica, Telecomunicações e Informática, I3N Institute for Nanostructures, Nanomodell ...

  • Venue:
  • ICARIS'12 Proceedings of the 11th international conference on Artificial Immune Systems
  • Year:
  • 2012

Quantified Score

Hi-index 0.00

Visualization

Abstract

An negative selection algorithm is presented for intrusion detection tasks for systems with arbitrary diversity. This algorithm uses two types of agents, detectors and presenters. Presenters present information to detectors; detectors are selected to engage in a maximally frustrated dynamics when presenters present data from a reference state. We show that if presenters present information that has never been available during the selection stage, then presenters engage in a less frustrated dynamics and their abnormal presentation can be detected. The performance of our algorithm is independent of the dimension of the space, i.e., the length of information presented by presenters, and hence does not suffer from the dimensionality curse accompanying current methods.