An immunity-based technique to characterize intrusions in computer networks
An immunity-based technique to characterize intrusions in computer networks
复制标题
DOI：
10.1109/tevc.2002.1011541
复制
发表时间：
2002-06
期刊：
影响因子：
--
通讯作者：
F. González;D. Dasgupta
中科院分区：
文献类型：
--
作者：
F. González;D. Dasgupta
本文提出了一种技术的启发，免疫系统的负选择机制，可以检测外来模式的补充（非自我）空间。特别是，新的模式检测器（在互补空间）的进化使用遗传搜索，它可以区分不同程度的异常网络流量。本文证明了这种技术的有用性，以检测各种各样的入侵活动的网络计算机。我们还使用了一个积极的表征方法的基础上最近邻分类。使用入侵检测数据集进行实验，并进行验证。沿着报告了一些结果，并作了分析和总结。
This paper presents a technique inspired by the negative selection mechanism of the immune system that can detect foreign patterns in the complement (nonself) space. In particular, the novel pattern detectors (in the complement space) are evolved using a genetic search, which could differentiate varying degrees of abnormality in network traffic. The paper demonstrates the usefulness of such a technique to detect a wide variety of intrusive activities on networked computers. We also used a positive characterization method based on a nearest-neighbor classification. Experiments are performed using intrusion detection data sets and tested for validation. Some results are reported along with analysis and concluding remarks.