Abstract:Almost daily we hear news about a security breach somewhere, as hackers are constantly finding new ways to get around even the most complex firewalls and security systems. This turned the security into one of the top research areas. Artificial Immune Systems are techniques inspired by biological immune system-specifically the human immune system-which basic function is to protect the body (system) and defend against attacks of different types. For this reason, many have applied the artificial immune system in the field of network security and intrusion detection. In this chapter, a basic model of a multi-layer system is discussed, along with the basics of artificial immune systems and network intrusion detection. An actual experiment is included, which involved a layer for data preprocessing and feature selection (using Principal Component Analysis), a layer for detectors generation and anomaly detection (Using Genetic Algorithm with Negative Selection Approach), and finally a layer for detected anomalies classification (using decision tree classifiers). The principle interest of this work is to benchmark the performance of the proposed multi-layer IDS system by using NSL-KDD benchmark data set used by IDS researchers. The obtained results of the anomaly detection layer shows that up to 81% of the attacks were successfully detected as attacks. The results of the classification layer demonstrated that naive bayes classifier has better classification accuracy in the case of lower presented attacks such as U2R and R2L, while the J48 decision tree classifier gives high accuracy up to 82% for DoS attacks and 65.4% for probe attacks in the anomaly traffic.

Intrusion detection techniques and approaches

A comparison of Intrusion Detection systems

Survey of intrusion detection systems: techniques, datasets and challenges

An overview of Intrusion Detection and Prevention Systems

Understanding Modern Intrusion Detection Systems: A Survey

An integrated pattern recognition approach for intrusion detection

Survey on Intrusion Detection Techniques

Several Approaches Used in Intrusion Detection Based on Artificial Intelligence

Detection Approach for Malicious Behaviors Based on Data Mining

Multilayer Machine Learning-Based Intrusion Detection System

Research on Intrusion Detection Implementation Methods

Network Intrusion Detection and Prevention

Research on Intrusion Detection Techniques

Analysis of an intelligent agent intrusion response system

Research of Intrusion Detection System Based on Computer Network

Intrusion detection techniques in network environment: a systematic review

An Anomaly & Signature-based Intrusion Detection System Model

A Survey of Artificial Immune System Based Intrusion Detection.

Intrusion Response Systems: Past, Present and Future

Immune System Approaches to Intrusion Detection - A Review (ICARIS)

Intrusion Detection System Based on Pattern Recognition