Abstract:The most daunting and challenging task in intrusion detection is to distinguishing between normal and malicious traffics effectively. In order to complete such a task, the biological danger theory has appeared to be one of the most appealing immunological models which has been converted to a computer science algorithm, named as Dendritic Cell Algorithm (DCA). To perform a binary classification, the DCA goes through four phases, preprocessing, detection, context assessment and classification. In particular, the context assessment phase is performed by comparing the signal concentration values between mature (i.e., abnormality) and semi-mature (i.e., normality) contexts. The conventional DCA requires a crisp separation between semi-mature and mature cumulative context values. This can be hard if the difference between the two contexts is marginal, which negatively affects the classification accuracy. In addition, it is technically difficult to quantify the actual meaning of semi-mature and mature in the DCA. This paper proposes an approach that integrates the K-Means clustering algorithm to the DCA to map the DCA cumulative semi-mature and mature context values into semi-mature (normal) and mature (anomaly) clusters in order to improve the classification accuracy. The KDD99 data set was utilized in this work for system validation and evaluation, and the experimental results revealed an improvement in the classification accuracy by the proposed approach.

Intrusion Detection Based on Adaptive Polyclonal Clustering

Research of Intrusion Detection System Based on Clone Clustering

Intrusion Detection Based on Immune Clustering

Intrusion Detection Based on Adaptive Immune Classifier

Intrusion Detection Based on Immune Clonal Selection Algorithms

Incremental Clustering Algorithm for Intrusion Detection Using Clonal Selection

An Adaptive Clustering Algorithm for Intrusion Detection

An Intrusion Detection Approach Based on Affinity Propagation Clustering

A Genetic Clustering Method for Intrusion Detection.

An Adaptive Anomaly Detection Based on Hierarchical Clustering

Clustering and Hybrid Genetic Algorithm Based Intrusion Detection Strategy

A Parallel Clustering Ensemble Algorithm for Intrusion Detection System

Anomaly Detection Algorithm Based on Improved Density Clustering

An Adaptive Intrusion Detection Algorithm Based on Improved Dynamic Clonal Selection Algorithms

Intrusion Detection Classifier Based On Self-Organizing Ant Colony Networks Clustering

Intrusion Detection Algorithm Based on Simulated Annealing and K-mean Clustering

Polyclonal Clustering Algorithm and Its Convergence

CLUSTERING BASED ON SWARM INTELLIGENCE WITH APPLICATION TO ANOMALY INTRUSION DETECTION

The Application Of Immune Clone Algorithm In Network Intrusion Detection

A Revised Dendritic Cell Algorithm Using K-Means Clustering.

A time stamped clustering method for intrusion detection