Immunity-based intrusion detection system design, vulnerability analysis, and GENERTIA's genetic arms race

Proceedings of the ACM Symposium on Applied Computing

Volumn 2, Issue , 2005, Pages 952-956

  Hou, Haiyu ^a   Dozier, Gerry ^a  

^a AUBURN UNIVERSITY   (United States)

Author keywords

AIS; AIS redesign; GENERTIA; Genetic Algorithm; Vulnerability analysis

Indexed keywords

GENERTIA; INTRUSION DETECTION SYSTEM DESIGN; VULNERABILITY ANALYSIS;

GENETIC ALGORITHMS; SYSTEMS ANALYSIS;

SECURITY OF DATA;

EID: 33644537355     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1066677.1066895     Document Type: Conference Paper

References (26)

1. Dasgupta, D. (1999). "An Overview of Artificial Immune System and Their Applications", Artificial Immune Systems and Their Applications, D. Dasgupta, ed., pp. 3-21, Springer.
2. Hofmeyr, S. (1999). "An Immunological Model of Distributed Detection and Its Application to Computer Security", PhD dissertation, Department of Computer Sciences, University of New Mexico.
3. Hofmeyr, S., and Forrest, S. (1999). "Immunity by Design: An Artificial Immune System", Proceedings of the 1999 Genetic and Evolutionary Computation Conference, pp. 1289-1296.
4. Hofmeyr, S., and Forrest, S. (1999). "Architecture for an Artificial Immune System", Evolutionary Computation, 7(1):45-68.
5. Balthrop, J., Forrest, S. and Glickman, M. (2002). "Revisiting LISYS: Parameters and Normal Behavior", Proceedings of the 2002 Congress on Evolutionary Computation, 1045-1050.
6. Balthrop, J., Esponda, F., Forrest, S., Glickman, M. (2002). "Coverage and generalization in an Artificial Immune System", Proceedings of the 2002 Genetic and Evolutionary Computation Conference.
7. Dasgupta, D., (1999). "Immunity-Based Intrusion Detection System: A General Framework", Proceedings of the National Information Systems Security Conference.
8. Dasgupta, D., (2002). "An Immunity-Based Technique to Characterize Intrusions in Computer Network", IEEE Transactions on Evolutionary Computation. 6(3): 281-291.
9. Kim, J. and Bentley, P. J. (2001), "Towards an Artificial Immune System for Network Intrusion Detection: An Investigation of Clonal Selection with a Negative Selection Operator", Proceedings of the Congress on Evolutionary Computation, pp. 1244-1252.
10. Kim, J. and Bentley, P. J. (1999). "Negative Selection and Niching by an Artificial Immune System for Network Intrusion Detection", A late-breaking paper. Genetic and Evolutionary Computation Conference, 149-158.
11. Hou, H., Zhu, J., and Dozier, G. (2002) "Artificial Immunity using Constraint-based Detectors", Proceedings of the 2002 World Automation Congress, 13:239-244.
12. Hou, H., and Dozier, G. (2004) "Comparing the Performance of Binary-Coded Detector and Constraint-Based Detector", Proceedings of the 2004 Congress of Evolutionary Computation, 773-777.
13. Zhu, J. (2002) Use of an Immune Model to Improve Intrusion Detection on Dynamic Broadcast Local Area Networks, Masters Thesis, Department of Computer Science and Software Engineering, Auburn University.
14. Dozier, G. (2003) "IDS Vulnerability Analysis Using GENERTIA Red Teams", Proceedings of the International Conference on Security and Management, 171-176.
15. Forrest, S., Perelson, S., Allen, L. and Cherukuri, R. (1994). "Self-nonself discrimination in a computer", Proceeding of the 1994 IEEE Symposium on Research in Security and Privacy, 202-212.
16. Yokoo, M., Durfee, E., Ishida, T., Kuwabara, K. (1998). "The Distributed Constraint Satisfaction Problem: Formalization and Algorithms", IEEE Transaction on Knowledge and Data Engineering, 10(5):673-685.
17. Mitchell, T. M. (1997) Machine Learning, McGraw-Hill.
18. Marchette, D.J. (2001) Computer Intrusion Detection and Network Monitoring: A Statistical Viewpoint, Springer.
19. Eshelman, L.J. and Schaffer, J. D., "Real-Coded Genetic Algorithms and Interval Schemata," Foundations of Genetic Algorithms, Morgan Kaufmann.
20. Blickle, T. and Thiele, L. (1995) "A Comparison of Selection Schemes used in Genetic Algorithms", TIK Report No. 11, Computer Engineering and Communication Networks Lab (TIK), Swiss Federal Institute of Technology (ETH) Zurich, Switzerland.
21. Goldberg, D. and Deb, K "A Comparative Analysis of Selection Schemes Used in Genetic Algorithms", Foundations of Genetic Algorithms, Rawlins, G. ed., 69-93, Morgan Kaufmann. (1989).
22. Cisco Secure, http://www.cisco.com/warp/public/cc/pd/sqsw/sgidsz/, last accessed on September 1, 2004.
23. Enterasys Dragon, http://www.enterasys.com/products/ids/, last accessed on September 1, 2004.
24. NFR, http://www.nfr.com/solutions/, last accessed on September 1, 2004.
25. Snort, http://www.snort.org/, last accessed on September 1, 2004.
26. 1998 DARPA Intrusion Detection Evaluation Data Set, http://www.ll.mit. edu/IST/ideval/data/1998/1998_data_index.html, last accessed on September 1, 2004.