CDIS: Towards a Computer Immune System for Detecting Network Intrusions
Lecture notes in computer sciencePublished 1 January 2001
Paul Williams, Kevin P. Anchor, John L. Bebo, Gregg H. Gunsch, Gary D. Lamont
Citations77
SJR quartileQ2
SJR score0.35
SNIP0.55
Generate an AI Snapshot to get a quick, structured summary of this paper.
Study Snapshot
ObjectiveStudy objective
MethodsResearch methodology
PopulationPopulation studied
Sample sizeSample sizes
OutcomesStudy outcomes here
ResultsStudy results comes here
LimitationsResearch study limitations comes here
A concise AI-generated summary of the paper will appear here once you click Generate AI Snapshot.
TL;DR
This research investigates the feasibility of using evolutionary search techniques, in the context of a computer immune system, to detect computer network intrusions, with particular emphasis on developing techniques for catching new attacks.
Abstract
Intrusion/misuse detection is the top information assurance priority of both the national interagency INFOSEC Research Council and the Office of the Assistant Secretary of Defense. Traditional IDSs are effective at detecting known attacks; however, developing truly proactive defensive systems remains an open problem. This research investigates the feasibility of using evolutionary search techniques, in the context of a computer immune system, to detect computer network intrusions, with particular emphasis on developing techniques for catching new attacks. The system provided very low false-negative and false-positive error rates during initial experimentation.
Keywords
Computer ScienceEngineering
Genetic Algorithms in Search, Optimization and Machine Learning
17,773 Citations1988David E. Goldberg, David Robson
How to Solve It: Modern Heuristics
1,633 Citations2004Zbigniew Michalewicz, David B. Fogel
This book discusses computational experiments with heuristic methods for solving practical problems and basic concepts of probability and Statistics, as well as an Evolutionary approach to decision-making.
Journal of Computer SecurityIntrusion detection using sequences of system calls
1,314 Citations1998Steven Hofmeyr, Stephanie Forrest +1 more
Evidence is given that short sequences of system calls executed by running processes are a good discriminator between normal and abnormal operating characteristics of several common UNIX programs.
Evolutionary ComputationArchitecture for an Artificial Immune System
867 Citations2000Steven Hofmeyr, Stephanie Forrest
In this paper, ARTIS is applied to computer security in the form of a network intrusion detection system called LISYS, which is shown to be effective at detecting intrusions, while maintaining low false positive rates.
IEEE Transactions on Evolutionary ComputationAn artificial immune system architecture for computer security applications
351 Citations2002Paul K. Harmer, Paul Williams +2 more
A self-adaptive distributed agent-based defense immune system based on biological strategies is developed within a hierarchical layered architecture and the results validate the use of a distributed-agent biological system approach toward the computer security problems of virus elimination and ID.
State of the Practice of Intrusion Detection Technologies
347 Citations2000Julia Allen, Alan M. Christie +3 more
A goal of this report is to provide an unbiased assessment of publicly available ID technology and it is hoped this will help those who purchase and use ID technology to gain a realistic understanding of its capabilities and limitations.
Pattern recognition engineering
346 Citations1993Morton Nadler, Eric P. Smith
Immunity by design: an artificial immune system
321 Citations1999Steven Hofmeyr, Stephanie Forrest
An artificial immune system is described that is distributed, robust, dynamic, diverse, diverse and adaptive, and places many features of the vertebrate immune system in the context of the problem of protecting a network of computers from illegal intrusions.
Principles of a computer immune system
281 Citations1997Anil Somayaji, Steven Hofmeyr +1 more
These principles suggest a wide variety of architectures for a computer immune system, including distributability, diversity, disposability, adaptability, autonomy, dynamic coverage, anomaly detection, multiple layers, identity via behavior, no trusted components, and imperfect detection.
Immunology as Information Processing
96 Citations2001Stephanie Forrest, Steven Hofmeyr
This chapter describes the behavior of the immune system from an informationprocessing perspective and reviews a series of projects conducted at the University of New Mexico and the Santa Fe Institute, which have developed and explored the theme of immunology as information processing.
An Artificial Immune Model for Network Intrusion Detection
33 Citations1999Juri Kim, P.J. Bentley
A new methodology to this problem is presented, inspired by the human immune system and based on a novel artificial immune model, which shows considerable promise for future network-based IDS’s.
Comparing local search with respect to genetic evolution to detect intrusions in computer networks
25 Citations2002Filippo Neri
This work provides an empirical proof that representation change of the network data can result in a significant increase in the classification performances of the traffic models and compares models of network traffic acquired by a system based on a distributed genetic algorithm with the ones acquired by one based on greedy heuristics.
Defense Technical Information Center (DTIC)A Distributed Agent Architecture for a Computer Virus Immune System
12 Citations2012Paul K. Harmer
This research develops a model of the BIS and utilizes software agents to implement a CVIS, a highly parallel defense-in-depth solution for detecting and eliminating foreign invaders.