Swarm intelligence in intrusion detection: A survey

Computers and Security

Volumn 30, Issue 8, 2011, Pages 625-642

  Kolias, C ^a   Kambourakis, G ^a   Maragoudakis, M ^a  

^a UNIVERSITY OF THE AEGEAN   (Greece)

Author keywords

Ant colony clustering; Ant colony optimization; Intrusion detection; Particle swarm optimization; Survey; Swarm intelligence

Indexed keywords

ANT COLONY OPTIMIZATION; EFFICIENCY; PARTICLE SWARM OPTIMIZATION (PSO); SURVEYING; SURVEYS; SWARM INTELLIGENCE;

ANT COLONY CLUSTERING; INTRUSION DETECTION SYSTEMS; SECURITY INFRASTRUCTURE; SI-BASED;

INTRUSION DETECTION;

EID: 80955142722     PISSN: 01674048     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.cose.2011.08.009     Document Type: Article

References (112)

1. M.S. Abadeh, and J. Habibi A hybridization of evolutionary fuzzy systems and ant colony optimization for intrusion detection The ISC International Journal of Information Security 2 1 2010 33 46
2. M.S. Abadeh, J. Habibi, and E. Soroush Induction of fuzzy classification systems via evolutionary ACO-based Algorithms International Journal of Simulation, Systems, Science, Technology 9 3 2008
3. M. Abadi, and S. Jalali An ant colony optimization algorithm for network vulnerability analysis Iranian Journal for Electrical and Electronic Engineering 2006 106 120
4. Agravat D, Vaishnav U, Swadas PB. Modified ant miner for intrusion detection. In: Proceedings of the Second International Conference on Machine Learning and Computing 2010. p. 228-232.
5. D. Alahakoon, S.K. Halgamuge, and B. Srinivasan Dynamic self-organizing maps with controlled growth for knowledge discovery IEEE Transactions on Neural Networks 11 3 2000 601 614
6. Alipour H, Khosrowshahi E, Esmaeili M, Nourhossein M. ACO-FCR: applying ACO-based algorithms to induct FCR. In: Proceedings of the World Congress on Engineering (IWCE) 2008. p. 12-17.
7. Amini M, Jalili R. Network-based intrusion detection using unsupervised adaptive resonance theory (ART). In: Proceedings of the 4th Conference on Engineering of Intelligent Systems (EIS 2004) 2004.
8. Banerjee S, Grosan C, Abraham A. IDEAS: Intrusion Detection Based on Emotional Ants for Sensors. In: Proceedings of the 5th International Conference on Intelligent Systems Design and Applications 2005a. p. 344-349.
9. S. Banerjee, C. Grosan, A. Abraham, and P.K. Mahanti Intrusion detection in sensor networks using emotional ants International Journal of Applied Science and Computations 12 3 2005 152 173
10. Beni G, Wang J. Swarm intelligence in cellular robotics systems. In: Proceedings of NATO Advanced Workshop on Robots and Biological System 1989. p. 703-712.
11. C.J.C. Burges A tutorial on support vector machines for pattern recognition Knowledge Discovery and Data Mining 2 2 1998 121 167 (Pubitemid 128695475)
12. Chang-Lung T, Chun-Chi T, Chin-Chuan H. Intrusive behavior analysis based on honey pot tracking and ant algorithm analysis. In: Proceedings of the 43rd Annual 2009 International Carnahan Conference on Security Technology 2009. p.248-252.
13. M.-C. Chen, B. Chiang, C. Jeng, C.R. Yang, and G.H. Lai Tracing denial of service origin: ant colony approach Applications of Evolutionary Computing 2006
14. Chen ZF, Qian PD, Chen ZF. Application of PSO-RBF neural network in network intrusion detection. In: Proceedings of the 3rd International Symposium on Intelligent Information Technology Application 2009. p. 362-364.
15. C. Cortes, and V. Vapnik Support vector networks Machine Learning 20 1995 273 297
16. The DARPA-Lincoln Dataset. Retrieved January 26, 2008, from http://www.ll.mit.edu/IST/ideval/data/data-index.html.
17. Deneubourg JL, Goss S, Franks N, Sendova Franks A, Detrain C, Chretien L. The dynamics of collective sorting robot-like ants and ant-like robots. In: Proceedings of the First International Conference on Simulation of Adaptive Behavior: From Animals to Animats. 1990a. p.356-363.
18. J.L. Deneubourg, S. Aron, S. Goss, and J.-M. Pasteels The self-organizing exploratory pattern of the Argentine ant Journal of Insect Behavior 3 1 1990 159 168
19. D. Denning An intrusion detection model IEEE Transactions of Software Engineering 13 2 1987 222 232
20. Dickerson JE, Dickerson JA. Fuzzy network profiling for intrusion detection. In: Proceedings of the 19th International Conference of the North American on Fuzzy Information Processing Society (NAFIPS). 2000. p.301-306.
21. M. Dorigo, and G. Di Caro The ant colony optimization meta-heuristic New Ideas in Optimization 1999 11 32
22. M. Dorigo, and T. Stutzle Ant colony optimization 2004 MIT Press
23. Dozier G, Brown D, Hurley J, Cain K. Vulnerability analysis of AIS-based intrusion detection systems via genetic and particle swarm red teams. In: Proceedings of the Congress on Evolutionary Computation (CEC2004). 2004. p. 111-116.
24. G. Dozier, D. Brown, H. Hou, and J. Hurley Vulnerability analysis of immunity-based intrusion detection systems using genetic and evolutionary hackers Applied Soft Computing 7 2 2007 547 553 (Pubitemid 46205472)
25. D. Duan, S. Chen, and W. Yang Intrusion detection system based on support vector machine and active learning Computer: Engineering 2007
26. C. Elkan Results of the KDD'99 classifier learning contest. SIGKDD Explor. Newsl 1 2 1999 63 64
27. Fenet S, Hassas S. A distributed intrusion detection and response system based on mobile autonomous agents using social insects communication paradigm. In: Proceedings of the First International Workshop on Security of Mobile Multiagent Systems (SEMAS). 2001. p. 41-58.
28. Feng Y, Wu ZF, Wu KG, Xiong ZY, Zhou Y. An unsupervised anomaly intrusion detection algorithm based on swarm intelligence. In: the Proceedings of the Fourth International Conference on Machine Learning and Cybernetics. 2005. p.3965-3969. (Pubitemid 41734605)
29. Feng Y, Zhong J, Ye CY, Wu ZF. Clustering based on self-organizing ant colony networks with application to intrusion detection. In: Proceedings of the Sixth International Conference on Intelligent Systems Design and Applications (ISDA '06). 2006. p.1077-1080. (Pubitemid 47179196)
30. Y. Feng, J. Zhong, Z. Xiong, C.Y. Ye, and K.G. Wu Intrusion detection classifier based on dynamic SOM and swarm intelligence clustering Advances in Congnitive Neurodynamics ICCN 2007 969 974
31. Y. Feng, Z. Zhong, Z.-Y. Xiong, C.-X. Ye, and K.-G. Wu Network anomaly detection based on DSOM and ACO clustering Advances in Neural Networks 2007 947 955 (Pubitemid 350270146)
32. RG Reynolds Flocks, herds, and schools: a distributed behavioral model Computer Graphics 21 4 1987 25 34
33. Foukia N. IDReAM: Intrusion Detection and Response executed with Agent Mobility. In: Proceedings of The International Conference on Autonomous Agents and Multi-Agent Systems (AAMAS'05). 2005. p. 264-270.
34. Fu X, Hogrefe D, Narayanan S, Soltwisch R. QoS and security in 4G networks. In: Proceedings of the 1st CIC/IEEE Global Mobile Congress (GMC).2004. p. 117-122.
35. H. Gao, X. Wang, and H. Yang Swarm intelligence and SVM based network intrusion feature selection and detection. Technical Report 2005 College of Information Science and Engineering, East China University of Science and Technology Shanghai
36. Gao HH, Yang HH, Wang XY. Ant colony optimization based network intrusion feature selection and detection. In: Proceedings of 2005 International Conference on Machine Learning and Cybernetics. 2005b. p.3871-3875.
37. H. Gao, H. Yang, and X. Wang Selection and detection of network intrusion feature based on BPSO-SVM. Technical Report 2006 College of Information Science and Engineering, East China University of Science and Technology Shanghai
38. S. Goss, S. Aron, J.L. Deneubourg, and J.M. Pasteels Self-organized shortcuts in the Argentine ant Naturwissenschaften 76 12 1989 579 581 (Pubitemid 20073252)
39. C. Guolong, C. Qingliang, and G. Wenzhong A PSO-based approach to rule learning in network intrusion detection Fuzzy Information and Engineering 2007 666 673
40. Haglund AJ, Hatanen K, Sorvari AS. A computer host-based user anomaly detection system using the self-organizing map. In: Proceedings of the International Joint Conference on Neural Networks (IJCNN'00). 2000. p.411-416.
41. M.R. Hestenes, and E. Stiefel Methods of conjugate gradients for solving linear systems Journal of Research of the National Bureau of Standards 49 6 1952 409 436
42. The Internet Exploration Shootout Dataset. Retrieved January 26, 2008, from http://ivpr.cs.uml.edu/shootout/network.html.
43. H. Ishibuchi, and T. Nakashima Improving the performance of fuzzy classifier systems for pattern classification problems with continuous attributes IEEE Transactions on Industrial Electronics 46 6 1999 1057 1068 (Pubitemid 30527844)
44. H. Ishibuchi, T. Nakashima, and T. Muratam Performance evaluation of fuzzy classifier systems for multi-dimensional pattern classification problems. IEEE Transactions on Systems Man and Cybernetics 21 5 1999 61 68
45. S. Janakiraman, and V. Vasudevan ACO based distributed intrusion detection system International Journal of Digital Content Technology and Its Applications 3 1 2009 66 72
46. S. Jha, O. Sheyner, and J.M. Wing Minimization and reliability analysis of attack graphs. Technical Report 2002 School of Computer Science, Carnegie Mellon University USA
47. Jha S, Sheyner O, Wing MJ. Two formal analyses of attack graphs. In: Proceedings of the 15th IEEE Computer Security Foundations Workshop. 2002b. p. 49-63.
48. Jian G, Da-Xin L, Bin-Ge C. An induction learning approach for building intrusion detection models using genetic algorithms. In: Proceedings of the Fifth World Congress on Intelligent Control and Automation (WCICA). 2004. p.4339-4342.
49. Junbing H, Dongyang L, Chuan C. An improved ant-based classifier for intrusion detection. In: Proceedings of the Third International Conference on Natural Computation (ICNC 2007). 2007. p. 819-823.
50. Kanade PM, Hall LO. Fuzzy ants as a clustering concept. In: Proceedings of the 22nd International Conference of the North American Fuzzy Information Processing Society. 2003. p. 227-232.
51. The KDD99 Dataset. Retrieved January 26, 2008, from http://kdd.ics.uci. edu/databases/kddcup99/task.html.
52. Kennedy J, Eberhart RC. Particle swarm optimization. In: Proceedings of the IEEE International Joint Conference on Neural Networks. 1995. p. 1942-1948.
53. Kennedy J, Eberhart R. A discrete binary version of the particle swarm algorithm. In: Proceedings of the IEEE International Conference on Systems, Man, and Cybernetics. 1997. p. 4104-4108.
54. J. Kim, P.J. Bentley, U. Aickelin, J. Greensmith, G. Tedesco, and J. Twycross Immune system approaches to intrusion detection - a review Natural Computing 6 4 2007 413 466 (Pubitemid 47629391)
55. Kim JW. Integrating artificial immune algorithms for intrusion detection. PhD Thesis. University College London 2002.
56. Kohonen T. Self-Organizing Maps. Berlin Germany:Springer-Verlang. 1995
57. Y. Li, G. Yang, J. Xu, and B. Zhao Anomaly detection for clustering algorithm based on particle swarm optimization Journal of Jiangsu University of Science and Technology(Natural Science Edition) 2009
58. Z. Lianying, and L. Fengyu A Swarm-Intelligence-based intrusion detection technique IJCSNS International Journal of Computer Science and Network Security 6 7 2006 146 150
59. R. Lippmann, J.W. Haines, J.D. Fried, J. Korba, and K. Das The 1999 DARPA off-line intrusion detection evaluation Computer Networks 34 4 2000 579 595
60. Liu L, Liu Y. MQPSO based on wavelet neural network for network anomaly detection. In: Proceedings of the 5th International Conference on Wireless Communications, Networking and Mobile Computing (WiCom '09). 2009. p. 1-5.
61. Y. Liu, R. Ma, and X. Lin Network anomal detection wavelet neural network based on QPSO Journal of Liaoning Technical University(Natural Science) 2009
62. Liu H, Jian Y, Liu S. A new intelligent intrusion detection method based on attribute reduction and parameters optimization of SVM. In: Proceedings of the Second International Workshop on Education Technology and Computer Science (ETCS). 2010. p.202-205.
63. Lumer R, Faieta B. Diversity and adaptation in populations of clustering ants. In Proceedings of the Third International Conference on Simulation of Adaptive Behavior: From Animals to Animats. 1994. p. 501-508.
64. R.-H. Ma, and Y. Liu Wavelet fuzzy neural network based on modified QPSO for network anomaly detection Applied Mechanics and Materials 20-23 2010 1378 1384
65. Ma R, Liu Y, Lin X. Hybrid QPSO based wavelet neural networks for network anomaly detection. In: Proceedings of the Second Workshop on Digital Media and its Application in Museum and Heritages. 2007. p. 442-447.
66. Ma J, Liu X, Liu S. A new intrusion detection method based on BPSO-SVM. In: Proceedings of the International Symposium on Computational Intelligence and Design, 2008a. p. 473-477.
67. Ma R, Liu Y, Lin X, Wang Z. Network anomaly detection using RBF neural network with hybrid QPSO. In: Proceedings of the IEEE International Conference on Networking, Sensing and Control 2008b. p. 1284-1287.
68. MacQueen JB. Some methods for classification and analysis of multivariate observations. In: Proceedings of 5th Berkeley Symposium on Mathematical Statistics and Probability 1967. p. 281-297.
69. Mahoney M, Chan PK. An Analysis of the 1999 DARPA/Lincoln Laboratory evaluation data for network anomaly detection. Recent Advances in Intrusion Detection 2003. p. 220-237. (Pubitemid 137633167)
70. J. McHugh Testing intrusion detection systems: a critique of the 1998 and 1999 DARPA intrusion detection system evaluations as performed by Lincoln Laboratory ACM Transactions on Information and System Security (TISSEC) 3 4 2000 262 294
71. Michailidis E, Katsikas SK, Georgopoulos E. Intrusion detection using evolutionary neural networks. In: Proceedings of the Panhellenic conference on informatics 2008 (PCI 2008). p. 8-12, 2008.
72. M.F. Moller A scaled conjugate gradient algorithm for fast supervised learning Neural Networks 6 4 1993 525 533
73. Muraleedharan R, Osadciw LA. An intrusion detection framework for sensor networks using honeypot and Swarm Intelligence. In: Proceedings of the 6th Annual International Conference on Mobile and Ubiquitous Systems: Networking & Services (MobiQuitous '09) 2009. p. 1-2.
74. M. Orr Introduction to radial basis function networks. Technical report. Institute for adaptive and neural computation Edinburg 1996 Edinburgh University
75. R.S. Parpinelli, H.S. Lopes, and A.A. Freitas Data mining with an ant colony optimization algorithm IEEE Transactions on Evolutionary Computation 6 4 2002 321 332 (Pubitemid 35032734)
76. Pathan ASK, Hyung-Woo L, Choong Seon H. Security in wireless sensor networks: issues and challenges. In: Proceedings of The 8th International Conference on Advanced Communication Technology (ICACT) 2006. pp. 1048.
77. R.W. Picard Affective computing 1997 MIT Press, Cambridge, MA
78. J.R. Quinlan C4.5: Programs for machine learning 1993 Morgan Kaufmann San Mateo, CA
79. L.R. Rajeswari, A. Kannan, and R. Baskaran An escalated approach to ant colony clustering algorithm for intrusion detection system Distributed Computing and Networking 2008 393 400 (Pubitemid 351256577)
80. C. Ramachandran, S. Misra, and M.S. Obaidat FORK: a novel two-pronged strategy for an agent-based intrusion detection scheme in ad-hoc networks Computer Communications 31 16 2008 3855 3869
81. Ramos V, Abraham A, ANTIDS: Self organized ant based clustering model for intrusion detection system. In: Proceedings of The Fourth IEEE International Workshop on Soft Computing as Transdisciplinary Science and Technology (WSTST'05) 2005. p. 977-986.
82. M. Sabhnani, and G. Serpen Why machine learning algorithms fail in misuse detection on KDD intrusion detection data set Journal of Intelligent Data Analysis 8 4 2004 403 415
83. K. Scarfone, and P. Mell Guide to intrusion detection and prevention systems (IDPS). Technical report 2007 NIST: National Institute of Standards and Technology. U.S. Department of Commerce
84. Sheyner O, Haines J, Jha S, Lippmann R, Wing JM. Automated generation and analysis of attack graphs. In: Proceedings of the 2002 IEEE Symposium on Security and Privacy 2002. p. 273-284. (Pubitemid 34648119)
85. R.K. Sivagaminathan, and S. Ramakrishnan A hybrid approach for feature subset selection using neural networks and ant colony optimization Expert Systems with Applications 33 1 2007 49 60 (Pubitemid 44959916)
86. Soroush E, Saniee Abadeh M, Habibi JA. Boosting ant-colony optimization algorithm for computer intrusion detection. In: Proceedings of The IEEE 20th International Symposium on Frontiers in Networking with Applications 2006.
87. Srinoy S, Rajabhat S. Intelligence system approach for computer network security. In: Proceedings of the Fourth IASTED Asian Conference on Communication Systems and Networks 2007. p. 89-95.
88. Srinoy S. An adaptive IDS model based on swarm intelligence and support vector machine. In: Proceedings of the International Symposium on Communications and Information Technologies 2006. p. 584-589.
89. Swarm Intelligence in Intrusion Detection: A Survey (Online Material), http://www.icsd.aegean.gr/postgraduates/kkolias/swarm-intelligence-in-intrusion- detection/online-resources.pdf
90. S. Tesink Improving intrusion detection system through machine learning. Technical Report 2007 ILK Research Group. Tilburg University
91. Tian W, Liu J. Intrusion detection quantitative analysis with support vector regression and particle swarm optimization algorithm. In: Proceedings of International Conference on the Wireless Networks and Information Systems, 2009 (WNIS '09). p. 133-136.
92. Tian W, Liu J. A new network intrusion detection identification model research. In: Proceedings of the 2nd International Asia Conference on Informatics in Control, Automation and Robotics (CAR) 2010. p. 9-12.
93. C. Torrence, and G. Compo A practical guide to wavelet analysis Bulletin of the American Meteorological Society 79 1 1998 61 78 (Pubitemid 128494959)
94. Tsang W, Kwong S. Unsupervised anomaly intrusion detection using ant colony clustering model. In: Proceedings of the 4th IEEE International Workshop on Soft Computing as Transdiciplinary Science and Technology 2005. p. 223-232.
95. Tsang CH, Kwong S. Multi-agent intrusion detection system in industrial network using ant colony clustering approach and unsupervised feature extraction. In: Proceedings of the IEEE International Conference on Industrial Technology 2005 (ICIT 2005). p.51-56.
96. W. Tsang, and S. Kwong Ant colony clustering and feature extraction for anomaly intrusion detection Swarm Intelligence in Data Mining 2006 101 121
97. The Unix User Dataset. Retrieved January 26, 2008, from http://kdd.ics.uci.edu/databases/UNIX-user-data/UNIX-user-data.htm.
98. Vizine AL, de Castro LN, Gudwin RR Text document classification using swarm intelligence. In: Proceedings of the International Conference on Integration of Knowledge Intensive Multi-Agent Systems 2005. p.134-139.
99. Wang Q, Megalooikonomou V. A clustering algorithm for intrusion detection. In: Proceedings of the SPIE Conference on Data Mining, Intrusion Detection, Information Assurance, and Data Networks Security 2005. p.31-38. (Pubitemid 41545369)
100. Wang J, Hong X, Ren R, Li T. A real-time intrusion detection system based on PSO-SVM. In: Proceedings of the International Workshop on Information Security and Application 2009 (IWISA 2009). p. 319-321.
101. M. Williamson Biologically inspired approaches to computer security. Technical Report 2002 HP Laboratories Bristol
102. E.O. Wilson Sociobiology: the new synthesis 1975 Belknap Press
103. S.X. Wu, and W. Banzhaf The use of computational intelligence in intrusion detection systems: a review Applied Soft Computing 10 1 2010 1 35
104. Xiao L, Shao Z, Liu G. K-means algorithm based on particle swarm optimization algorithm for anomaly intrusion detection. In: Proceedings of The Sixth World Congress on Intelligent Control and Automation 2006 (WCICA2006). p. 5854-5858.
105. H. Yang, H. Luo, F. Ye, S. Lu, and L. Zhang Security in mobile ad hoc networks: challenges and solutions IEEE Wireless Communications 11 1 2004 38 47
106. Yang S, Wang M, Licheng J. A quantum particle swarm optimization. In: Proceedings of the Congress on Evolutionary Computation 2004 (CEC2004). p. 320-324.
107. Zadeh LA. Fuzzy sets. Inf. Control 8 1965. p. 338-353.
108. Zainal A, Maarof MA, Shamsuddin SM. Feature selection using rough-dpso in anomaly intrusion detection In: Proceedings of the Conference on Computational Science and its Application (ICCSA) 2007. p. 512-524.
109. Q. Zhang, and A. Benveniste Wavelet networks IEEE Transactions on Neural Networks 3 6 1992 889 898 (Pubitemid 23580843)
110. Zhang Q, Feng W. Network intrusion detection by support vectors and ant colony. In: Proceedings of the 2009 International Workshop on Information Security and Application 2009. p. 639-642.
111. Zhao C, Wang W. An improved PSO-Based rule extraction algorithm for intrusion detection. In: Proceedings of International Conference on the Computational Intelligence and Natural Computing 2009 (CINC '09). p.56-58.
112. Zhou T, Li Y, Li J. Research on intrusion detection of SVM based on PSO. In: Proceedings of the International Conference on Machine Learning and Cybernetics 2009. p. 1205-1209.