Abstract:The artificial immune system and network anomaly detection system are developed with common goals and principles considered. Moreover, artificial immune-based network anomaly detection can adaptively learn and dynamically detect threats. However, existing immune recognition algorithms suffer from the curse of dimensionality, hole problems, and detector inefficiency tolerance. In this paper, we proposed a novel immune detector training mechanism for network anomaly detection. First, a hybrid filter embedded feature selection algorithm is designed to comprehensively evaluate features and select the optimal subset. Then, candidate detectors are generated based on self antigens, and the nonself region is represented using complementary space to circumvent the hole problem. Finally, considering the training efficiency during the evolution of the candidate detectors, an antigen clustering feature tree is constructed to rapidly index the tolerance objects. Furthermore, the algorithm considers the effect of the collaboration of multiple mature detectors on candidate detectors, and a Monte Carlo-based coverage estimation algorithm is designed to achieve more accurate and fine-grained maturation tolerance of candidate detectors. The theoretical analysis shows that the time complexity of our algorithm is significantly reduced. The experimental results show that our algorithm not only improves the detection accuracy but also reduces the time cost of detector training.

A New Network Intrusion Detection Model Based on Immunological Principle

Worm Intrusion Alarm Modeling Based on Network Traffic Character

Multi-agent based hybrid Intrusion detection system

Data-driven network layer security detection model and simulation for the Internet of Things based on an artificial immune system

Artificial Immune Detection for Network Intrusion Data Based on Quantitative Matching Method

Modeling of the Mimic Defense Based on Heterogeneous Redundancy

Design and Implementation of Network Worm Detection System for Internal Network

A virus detection model based on immunology and SVDD

Intrusion Detection And Simulation For High-Speed Networks

Hybrid Intrusion Detection System for Complicated Network

Exploring the Potential of the Innate Immune System for Computers Network Security

The Algorithm Design of Agent for Detecting and Analyzing Data in Intrusion Detection Based on Immune Principle

A Host-based Multi-layer Intrusion Detection Model and Its Detection Methods

Population-based Co-stimulation Artificial Immune Model

An Immunology-Inspired Network Security Architecture

Sensing Danger: Innate Immunology for Intrusion Detection

Network Intrusion Detection Method Based on Rough Set Theory

A novel immune detector training method for network anomaly detection

Intrusion Detection Model Based on Intention Modeling

A Model for Intrusion Detection System Based on Mobile Agent

Distributed Detection of Network Intrusions Based on a Parametric Model.