An immune inspired Network Intrusion Detection System utilising correlation

Tools

Tedesco, Gianni and Aickelin, Uwe (2006) An immune inspired Network Intrusion Detection System utilising correlation. In: AISB '06: adaptation in artificial and biological systems. Society for the Study of Artificial Intelligence and the Simulation of Behaviour, Bristol, pp. 16-17. ISBN 1902956975

Full text not available from this repository.

Abstract

Network Intrusion Detection Systems (NIDS) are computer systems which monitor a network with the aim of discerning malicious from benign activity on that network. While a wide range of approaches have met varying levels of success, most IDSs rely on having access to a database of known attack signatures which are written by security experts. Nowadays, in order to solve problems with false

positive alerts, correlation algorithms are used to add additional structure to sequences of IDS alerts. However, such techniques are of no help in discovering novel attacks or variations of known attacks, something the human immune system (HIS) is capable of doing in its own specialised domain. This paper presents a novel immune algorithm for application to the IDS problem. The goal is to discover

packets containing novel variations of attacks covered by an existing signature base.

Item Type: Book Section
RIS ID: https://nottingham-repository.worktribe.com/output/1019618
Additional Information: Originally presented at: Workshop on Artificial Immune Systems and Immune System Modelling, 4th April 2006; part of AISB'06: Adaptation in Artificial and Biological Systems, held at the University Bristol.
Schools/Departments: University of Nottingham, UK > Faculty of Science > School of Computer Science
Related URLs:
URLURL Type
http://www.cs.bris.ac.uk/~marshall/ais/ais.htmlUNSPECIFIED
Depositing User: Aickelin, Professor Uwe
Date Deposited: 30 Jan 2009 15:23
Last Modified: 04 May 2020 20:30
URI: https://eprints.nottingham.ac.uk/id/eprint/995

Actions (Archive Staff Only)

Edit View Edit View