Abstract
Agent-based artificial immune system (ABAIS) is applied to intrusion detection systems(IDS). The intelligence behind ABIDS is based on the functionality of dendritic cells in human immune systems. Antigens are profiles of system calls while corresponding behaviors are regarded as signals. ABAIS is based on the danger theory while dendritic cells agents (DC agent) are emulated for innate immune subsystem and T-cell agents (TC agent) are for adaptive immune subsystem. This ABIDS is based on the dual detections of DC agent for signals and TC agent for antigen, where each agent coordinates with other to calculate danger value (DV). According to DVs, immune response for malicious behaviors is activated by either computer host or Security Operating Center (SOC).
Access provided by Autonomous University of Puebla. Download to read the full chapter text
Chapter PDF
Similar content being viewed by others
Keywords
These keywords were added by machine and not by the authors. This process is experimental and the keywords may be updated as the learning algorithm improves.
References
The Ten Most Critical Web Application Security Vulnerabilities, 2007 update, 2002-2007 OWASP Foundation
Forrest, S., Hofmeyr, S.A., Somayaji, A., Longstaff, T.A.: A sense of self for Unix processes. In: Proceedinges of the 1996 IEEE Symposium on Research in Security and Privacy, pp. 120–128. IEEE Computer Society Press (1996)
Gu, F., Aickelin, U., Greensmith, J.: An Agent-based classification model. In: 9th European Agent Systems Summer School (EASSS 2007), Durham, UK (2007), http://arxiv.org/ftp/arxiv/papers/0910/0910.2874.pdf
Bauer, A., Beauchemin, C., Perelson, A.: Agent-based modeling of host-pathogen systems: the successes and challenges. Information Sciences 179, 1379–1389 (2009)
Harmer, P., Williams, P., Gunsch, G., Lamont, G.: An Artificial Immune System Architecture for Computer Security Applications. IEEE Transactions on Evolutionary Computations 65(3), 252–280 (2002)
Burnet, F.: The clonal selection theory of acquired immunity. Cambridge Univerisity Press (1995)
Matzinger, P.: Tolarance, Danger and the Extended Family. Annual Review in Immunology 12, 991–1045 (1994)
King, R., Russ, S., Lambert, A., Reese, D.: An Artificial Immune System Model for Intelligent Agents. Future Generation Computer Systems 17(4), 335–343 (2001)
Aickelin, U., Bentley, P., Cayzer, S., Kim, J., McLeod, J.: Danger Theory: The Link between AIS and IDS? In: Timmis, J., Bentley, P.J., Hart, E. (eds.) ICARIS 2003. LNCS, vol. 2787, pp. 147–155. Springer, Heidelberg (2003)
Kephart, J.: A Biologically Inspired Immune System for Computers. In: Artificial Life IV Proceedings of the Fourth International Workshop on the Synthesis and Simulation of Living Systems, pp. 130–139. MIT Press
Kim, J., Bentley, P., Aickelin, U., Greensmith, J., Tedesco, G., Twycross, J.: Immune system approaches to intrusion detection: a review. Natural Computing 6(4), 413–466 (2007)
Liu, S., Li, T., Wang, D., Zhao, K., Gong, X., Hu, X., Xu, C., Liang, G.: Immune Multi-agent Active Defense Model for Network Intrusion. In: Wang, T.-D., Li, X., Chen, S.-H., Wang, X., Abbass, H.A., Iba, H., Chen, G.-L., Yao, X. (eds.) SEAL 2006. LNCS, vol. 4247, pp. 104–111. Springer, Heidelberg (2006)
Dasgupta, D.: Immunity-based intrusion detection systems: a general framework. In: Proceeding of the 22nd National Information Systems Security Conference, NISSC (October 1999)
Burgess, M.: Computer Immunology. In: Proceedings of the Twelfth Systems Administration Conference (LISA 1998), Boston, Mass, December 6-11 (1998)
Aickelin, U., Cayzer, S.: The danger theory and its application to ais. In: Proceedings of the First International Conference on Artificial Immune System (ICARIS 2002), pp. 141–148 (2002)
Greensmith, J., Aickelin, J., Cayzer, S.: Detecting danger, The Dendritic Cell Algorithm. Robust Intelligent Systems 12, 89–112 (2008)
Kim, J., Wilson, W.O., Aickelin, U., McLeod, J.: Cooperative Automated Worm Response and Detection ImmuNe ALgorithm(CARDINAL) Inspired by T-Cell Immunity and Tolerance. In: Jacob, C., Pilat, M.L., Bentley, P.J., Timmis, J.I. (eds.) ICARIS 2005. LNCS, vol. 3627, pp. 168–181. Springer, Heidelberg (2005)
Sarafijanović, S., Boudec, J.Y.: An Artificial Immune SYstem for Misbehavior Detection in Mobile Ad-Hoc Networks with Virtual Thymus, Clustering, Danger Signal and Memory Detectors. International Journal of Unconventional Computing 1, 221–254 (2005)
Ishida, Y.: Immunity-based Systems. A Design Perspective. Springer (2004)
Weiss, G.: Multiagent Systems, A Modern Approach to Distributed Artificial Intelligence. MIT Press (1999)
Fu, H., Yuan, X., Wang, N.: Multi-agents artificial immune system (MAAIS) inspired by danger theory for anomaly detection. In: International Conference on Computational Intelligence and Security Workshops, pp. 570–573 (2007)
Kim, J., Bentley, P.: The Artificial Immune Model for network intrusion detection. In: Proceeding of European Congress on Intelligent Techniques and Soft Computing (EUFIT 1999), Aachen, Germany (September 1999)
Scarfone, K., Mell, P.: Guide to Intrusion Detection and Prevention Systems (IDPS). Computer Security Resource Center (National Institute of Standards and Technology) (800-94) (February 2007)
Kim, J.: Integrating artificial immune algorithms for intrusion detection, Ph.D thesis, University College London (2002)
Yeom, K.-W., Park, J.-H.: An artificial immune system model for multi agents based resource discovery in distributed environments. In: Proceedings of the First International Conference on Innovative Computing, Information and Control, pp. 234–239 (2006)
Aickelin, U., Bentley, P., Cayzer, S., Kim, J., McLeod, J.: Danger Theory: The Link between AIS and IDS? In: Timmis, J., Bentley, P.J., Hart, E. (eds.) ICARIS 2003. LNCS, vol. 2787, pp. 147–155. Springer, Heidelberg (2003)
Zhang, J., Liang, Y.: Integrating Innate and Adaptive Immunity for Worm Detection. In: Second International Workshop on Knowledge Discovery and Data Mining (WKDD 2009), pp. 693–696 (2009)
Kim, J., Bentley, P., Aickelin, U., Greensmith, J., Tedesco, G., Twycross, J.: Immune system approaches to intrusion detection-A review. Nature Computing 6, 413–466 (2007)
Hofmeyr, S., Forrest, S.: Immunity by Design. In: Proc. of the Genetic and Evolutionary Computation Conference (GECCO), pp. 1289–1296 (1999)
Yeom, K.-W.: Immune-inspired Algorithm for Anomaly Detection. In: Nedjah, N., Abraham, A., de Macedo Mourelle, L. (eds.) Computational Intelligence in Information Assurance and Security. SCI, vol. 57, pp. 129–154. Springer, Heidelberg (2007)
Boukerche, A., Machado, R., Juca, K., Sobral, J., Motarem, M.: An Agent based and Biological Inspired Real-time Intrusion Detection and Security Model for Computer Network Operations. Computer Communications 20, 2649–2660 (2007)
Forrest, S., Beauchemin, C.: Computer immunology. Immunological Reviews 216(1), 176–197 (2007)
Spafford, E., Zamboni, D.: Intrusion detection using autonomous agents. Computer Networks 34(4), 547–570 (2000)
Greensmith, J., Aickelin, U., Tedesco, G.: Information fusion for anomaly detection with the Dendritic Cell Algorithm. Information Fusion 11, 21–34 (2010)
Greensmith, J., Feyereisl, J., Aickelin, U.: The DCA: SOMe Comparison. Evolutionary Intelligence 1(2), 85–112 (2008)
Greensmith, J., Aickelin, U., Cayzer, S.: Introducing Dendritic Cells as a Novel Immune-Inspired Algorithm for Anomaly Detection. In: Jacob, C., Pilat, M.L., Bentley, P.J., Timmis, J.I. (eds.) ICARIS 2005. LNCS, vol. 3627, pp. 153–167. Springer, Heidelberg (2005)
Author information
Authors and Affiliations
Corresponding author
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2013 Springer-Verlag Berlin Heidelberg
About this chapter
Cite this chapter
Ou, CM., Ou, C.R., Wang, YT. (2013). Agent-Based Artificial Immune Systems (ABAIS) for Intrusion Detections: Inspiration from Danger Theory. In: Hakansson, A., Hartung, R. (eds) Agent and Multi-Agent Systems in Distributed Systems - Digital Economy and E-Commerce. Studies in Computational Intelligence, vol 462. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-642-35208-9_4
Download citation
DOI: https://doi.org/10.1007/978-3-642-35208-9_4
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-642-35207-2
Online ISBN: 978-3-642-35208-9
eBook Packages: EngineeringEngineering (R0)