Anomaly detection in TCP/IP networks using immune systems paradigm

Computer Communications

Volumn 30, Issue 4, 2007, Pages 740-749

  Seredynski, Franciszek ^a,b   Bouvry, Pascal ^c  

^a POLISH JAPANESE INSTITUTE OF INFORMATION TECHNOLOGY   (Poland)

^b INSTITUTE OF COMPUTER SCIENCE   (Poland)

^c UNIVERSITY OF LUXEMBOURG   (Luxembourg)

Author keywords

Anomaly detection; Artificial immune systems; Detectors generation; TCP IP protocols; Traffic data coding

Indexed keywords

DATA TRANSFER; ENCODING (SYMBOLS); NETWORK PROTOCOLS; SECURITY OF DATA; TELECOMMUNICATION TRAFFIC;

ANOMALY DETECTION; ARTIFICIAL IMMUNE SYSTEMS; DETECTORS GENERATION; TRAFFIC DATA CODING; TRANSMISSION CONTROL PROTOCOL (TCP);

INTERNET;

EID: 33846588283     PISSN: 01403664     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.comcom.2006.08.016     Document Type: Article

References (22)

1. M. Roesch, Snort: lightweight intrusion detection for networks, in: Proceedings of the 13th Conference on Systems Administration (LISA-99), Seatlle, WA, November 7-12, USENIX, 1999, pp. 229-238.
2. Eskin E. Anomaly detection over noisy data using learned probability distributions. Proceedings of the 17th International Conference on Machine Learning (ICML 2000) (2000), Stanford University, Stanford, CA, USA 255-262
3. W. Lee, S.J. Stolfo, K.W. Mok, Mining in a data-flow environment: experience in network intrusion detection, in: KDD, 1999, pp. 114-124.
4. R. Agrawal, M. Yoshi, Pnrule: a new framework for learning classifier models in data mining a case study in network intrusion detection, Technical Report RC-21719, IBM Research Division, 2000.
5. Y. Bouzida, S. Gombault, Eigenconnections to intrusion detection, in: Security and Protection in Information Processing Systems, IFIP 18th WorldComputer Congress, TC11 19th International Information Security Conference, 22-27 August 2004, Toulouse, France, 2004, pp. 241-258.
6. S. Axelsson, Visualising intrusions: watching the webserver, in: Security and Protection in Information Processing Systems, IFIP 18th WorldComputer Congress, TC11 19th International Information Security Conference, 22-27 August 2004, Toulouse, France, 2004, pp. 229-274.
7. Dozier G.V., Brown D., Hurley J., and Cain K. Vulnerability analysis of ais-based intrusion detection systems via genetic and particle swarm red teams. Proceedings of the 2004 IEEE Congress on Evolutionary Computation (2004), IEEE Press, Portland, Oregon 111-116
8. Leon E., Nasraouli O., and Gomez J. Anomaly detection based on unsupervised niche clustering with application to network intrusion detection. Proceedings of the 2004 IEEE Congress on Evolutionary Computation (2004), IEEE Press, Portland, Oregon 502-508
9. Sergio de Paula F., Nunes de Castro L., and Licio de Geus P. An intrusion detection system using ideas from the immune system. Proceedings of the 2004 IEEE Congress on Evolutionary Computation (2004), IEEE Press, Portland, Oregon 1059-1066
10. Farmer J.D., Packard N.H., and Perelson A.S. The immune system, adaptation, and machine learning. Physica D 22 (1986) 187-204
11. Forrest S., Smith R.E., Javornik B., and Perelson A.S. Using genetic algorithms to explore pattern recognition in the immune system. Evolutionary Computation 1 3 (1993) 191-211
12. Hofmeyr S.A., and Forrest S. Architecture for an artificial immune system. Evolutionary Computation 8 4 (2000) 443-473
13. Dasgupta D., and Gonzales F. An immunity-based technique to characterize intrusions in computer networks. IEEE Transactions on Evolutionary Computation 6 3 (2000) 281-291
14. Harmer P.K., Wiliams P.D., Gunsch G.H., and Lamont G.B. Artificial immune system architecture for computer security applications. IEEE Transactions on Evolutionary Computation 6 3 (2002) 252-279
15. Dasgupta D. An Overview of Artificial Immune Systems and Their Applications (1999), Springer pp. 3-23
16. E. Hart, P. Ross, J. Nelson, Producing robust schedules via an artificial immune system, in: Proceedings of the 1998 IEEE Congress on Evolutionary Computation, 1998, pp. 464-469.
17. D. Dasgupta, An artificial immune system as a multi-agent decision support system, in: IEEE International Conferences on Systems, Man and Cybernetics, 1998, pp. 3816-3820
18. de Castro L., and Von Zuben F. Learning and optimization using the clonal selection principle. IEEE Transactions on Evolutionary Computation 6 3 (2002) 239-251
19. Michalewicz Z. Genetic algorithms + data structures = evolution programs. Second extended ed. (1994), Springer-Verlag, New York, Inc., New York, NY, USA
20. M. Ostaszewski, F. Seredynski, P. Bouvry, A Nonself Space Approach to Network Anomaly Detection, in: Proceedings of NIDISC'06, held in conjuction with IPDPS 2006, Rhodes Island, Greece.
21. D. Rutkowski, Detecting intruders in computer networks using immune system (in polish), Master's thesis, Warsaw University of Technology, 2004.
22. M. Zissman, Darpa intrusion detection evaluation [online], http://www.ll.mit.edu/ist/ideval, Tech. Rep., MIT, 1999.