A cooperative immunological approach for detecting network anomaly

Detection of anomalies in compiled computer program files inspired by immune mechanisms using a template method

An intrusion detection system inspired by the human immune system is described: a custom artificial immune system that monitors a local area containing critical files in the operating system. The proposed mechanism scans the files and checks for possible malware-induced alterations in them, based on a negative selection algorithm. The system consists of two modules: a receptor generation unit, which generates receptors using an original method based on templates, and an anomaly detection unit. Anomalies detected in the files using previously generated receptors are reported to the user. The system has been implemented and experiments have been conducted to compare the effectiveness of the algorithms with that of a different receptor generation method, called the random receptor generation method. In a controlled testing environment, anomalies in the form of altered program code bytes were injected into the monitored programs. Real-world tests of this system have been performed regarding its performance and scalability. Experimental results are presented, evaluated in a comparative analysis, and some conclusions are drawn.

Outbreak detection model based on danger theory

In outbreak detection, one of the key issues is the need to deal with the weakness of early outbreak signals because this causes the detection model to have has less capability in terms of robustness when unseen outbreak patterns vary from those in the trained model. As a result, an imbalance between high detection rate and low false alarm rate occurs. To solve this problem, this study proposes a novel outbreak detection model based on danger theory; a bio-inspired method that replicates how the human body fights pathogens. We propose a signal formalization approach based on cumulative sum and a cumulative mature antigen contact value to suit the outbreak characteristic and danger theory. Two outbreak diseases, dengue and SARS, are subjected to a danger theory algorithm; namely the dendritic cell algorithm. To evaluate the model, four measurement metrics are applied: detection rate, specificity, false alarm rate, and accuracy. From the experiment, the proposed model outperforms the other detection approaches and shows a significant improvement for both diseases outbreak detection. The findings reveal that the robustness of the proposed immune model increases when dealing with inconsistent outbreak signals. The model is able to detect new unknown outbreak patterns and can discriminate between outbreak and non-outbreak cases with a consistent high detection rate, high sensitivity, and lower false alarm rate even without a training phase.

A survey of artificial immune system based intrusion detection

In the area of computer security, Intrusion Detection (ID) is a mechanism that attempts to discover abnormal access to computers by analyzing various interactions. There is a lot of literature about ID, but this study only surveys the approaches based on Artificial Immune System (AIS). The use of AIS in ID is an appealing concept in current techniques. This paper summarizes AIS based ID methods from a new view point; moreover, a framework is proposed for the design of AIS based ID Systems (IDSs). This framework is analyzed and discussed based on three core aspects: antibody/antigen encoding, generation algorithm, and evolution mode. Then we collate the commonly used algorithms, their implementation characteristics, and the development of IDSs into this framework. Finally, some of the future challenges in this area are also highlighted.

Fractal immunology and immune patterning: potential tools for immune protection and optimization

Fractals are self-similar geometric patterns that are inherently embedded throughout nature. Their discovery and application have produced significant benefits across a wide variety of biomedical applications. Recently, complex physiological systems (e.g., neurological, respiratory, cardiovascular) have been shown to exhibit fractal dimensions that are capable of distinguishing among physiologic function versus dysfunction and, in turn, health versus disease. Additionally, fractal data suggest that the immune system operates under similar patterned relationships, and this is in keeping with the recent findings that immune-based diseases are organized according to specific patterns. This review considers the potential benefits of using fractal analysis along with considerations of nonlinearity, scaling, and chaos as calibration tools to obtain holistic information on immune-environment interactions. The potential uses of both synthetic and artificial immune systems for improved protection of the biological immune system are also discussed. The addition of holistic measures of immune status to currently collected biomarkers of immunotoxicity has the potential to increase the effectiveness of health risk assessment. The objective of extending fractal physiology analyses to the immune system would be to promote immune optimization as a public health benefit, which would include improved: (1) immunotoxicity testing and effective health risk reduction and (2) measures of effective immune management for children, adults, and aged individuals.