Integrating Innate and Adaptive Immunity for Intrusion Detection

Network Intrusion Detection Systems (NIDS) monitor a net- work with the aim of discerning malicious from benign activity on that network. While a wide range of approaches have met varying levels of success, most IDS’s rely on having access to a database of known attack signatures which are written...

Full description

Bibliographic Details
Main Authors: Tedesco, Gianni, Twycross, Jamie, Aickelin, Uwe
Format: Conference or Workshop Item
Published: 2006
Online Access:https://eprints.nottingham.ac.uk/579/
_version_ 1848790435749691392
author Tedesco, Gianni
Twycross, Jamie
Aickelin, Uwe
author_facet Tedesco, Gianni
Twycross, Jamie
Aickelin, Uwe
author_sort Tedesco, Gianni
building Nottingham Research Data Repository
collection Online Access
description Network Intrusion Detection Systems (NIDS) monitor a net- work with the aim of discerning malicious from benign activity on that network. While a wide range of approaches have met varying levels of success, most IDS’s rely on having access to a database of known attack signatures which are written by security experts. Nowadays, in order to solve problems with false positive alerts, correlation algorithms are used to add additional structure to sequences of IDS alerts. However, such techniques are of no help in discovering novel attacks or variations of known attacks, something the human immune system (HIS) is capable of doing in its own specialised domain. This paper presents a novel immune algorithm for application to an intrusion detection problem. The goal is to discover packets containing novel variations of attacks covered by an existing signature base.
first_indexed 2025-11-14T18:12:34Z
format Conference or Workshop Item
id nottingham-579
institution University of Nottingham Malaysia Campus
institution_category Local University
last_indexed 2025-11-14T18:12:34Z
publishDate 2006
recordtype eprints
repository_type Digital Repository
spelling nottingham-5792020-05-04T20:30:21Z https://eprints.nottingham.ac.uk/579/ Integrating Innate and Adaptive Immunity for Intrusion Detection Tedesco, Gianni Twycross, Jamie Aickelin, Uwe Network Intrusion Detection Systems (NIDS) monitor a net- work with the aim of discerning malicious from benign activity on that network. While a wide range of approaches have met varying levels of success, most IDS’s rely on having access to a database of known attack signatures which are written by security experts. Nowadays, in order to solve problems with false positive alerts, correlation algorithms are used to add additional structure to sequences of IDS alerts. However, such techniques are of no help in discovering novel attacks or variations of known attacks, something the human immune system (HIS) is capable of doing in its own specialised domain. This paper presents a novel immune algorithm for application to an intrusion detection problem. The goal is to discover packets containing novel variations of attacks covered by an existing signature base. 2006 Conference or Workshop Item PeerReviewed Tedesco, Gianni, Twycross, Jamie and Aickelin, Uwe (2006) Integrating Innate and Adaptive Immunity for Intrusion Detection. In: Proceedings of the 5th International Conference on Artificial Immune Systems (ICARIS 2006), Oeiras, Portugal.
spellingShingle Tedesco, Gianni
Twycross, Jamie
Aickelin, Uwe
Integrating Innate and Adaptive Immunity for Intrusion Detection
title Integrating Innate and Adaptive Immunity for Intrusion Detection
title_full Integrating Innate and Adaptive Immunity for Intrusion Detection
title_fullStr Integrating Innate and Adaptive Immunity for Intrusion Detection
title_full_unstemmed Integrating Innate and Adaptive Immunity for Intrusion Detection
title_short Integrating Innate and Adaptive Immunity for Intrusion Detection
title_sort integrating innate and adaptive immunity for intrusion detection
url https://eprints.nottingham.ac.uk/579/