Result: Anomaly detection in TCP/IP networks using immune systems paradigm
Title:
Anomaly detection in TCP/IP networks using immune systems paradigm
Authors:
Source:
Computer communications. 30(4):740-749
Publisher Information:
Amsterdam; New York, NY; Tokyo: Elsevier Science, 2007.
Publication Year:
2007
Physical Description:
print, 22 ref
Original Material:
INIST-CNRS
Subject Terms:
Computer science, Informatique, Telecommunications, Télécommunications, Sciences exactes et technologie, Exact sciences and technology, Sciences appliquees, Applied sciences, Informatique; automatique theorique; systemes, Computer science; control theory; systems, Logiciel, Software, Systèmes informatiques et systèmes répartis. Interface utilisateur, Computer systems and distributed systems. User interface, Anomalie, Anomaly, Anomalía, Intelligence artificielle, Artificial intelligence, Inteligencia artificial, Protocole TCP, Transmission control protocol, Protocolo TCP, Protocole internet, Internet protocol, Protocolo internet, Protocole transmission, Transmission protocol, Protocolo transmisión, Système immunitaire, Immune system, Sistema inmunitario, Anomaly detection, Artificial immune systems, Detectors generation, TCP/IP protocols, Traffic data coding
Document Type:
Conference
Conference Paper
File Description:
text
Language:
English
Author Affiliations:
Polish-Japanese Institute of Information Technology, Koszykowa 86, 02-008 Warsaw, Poland
Institute of Computer Science, Polish Academy of Sciences, Ordona 21, 01-237 Warsaw, Poland
Faculty of Sciences, Technology and Communication, Luxembourg University, 6 rue Coudenhove Kalergi, 1359 Luxembourg-Kirchberg, Luxembourg
Institute of Computer Science, Polish Academy of Sciences, Ordona 21, 01-237 Warsaw, Poland
Faculty of Sciences, Technology and Communication, Luxembourg University, 6 rue Coudenhove Kalergi, 1359 Luxembourg-Kirchberg, Luxembourg
ISSN:
0140-3664
Rights:
Copyright 2007 INIST-CNRS
CC BY 4.0
Sauf mention contraire ci-dessus, le contenu de cette notice bibliographique peut être utilisé dans le cadre d’une licence CC BY 4.0 Inist-CNRS / Unless otherwise stated above, the content of this bibliographic record may be used under a CC BY 4.0 licence by Inist-CNRS / A menos que se haya señalado antes, el contenido de este registro bibliográfico puede ser utilizado al amparo de una licencia CC BY 4.0 Inist-CNRS
CC BY 4.0
Sauf mention contraire ci-dessus, le contenu de cette notice bibliographique peut être utilisé dans le cadre d’une licence CC BY 4.0 Inist-CNRS / Unless otherwise stated above, the content of this bibliographic record may be used under a CC BY 4.0 licence by Inist-CNRS / A menos que se haya señalado antes, el contenido de este registro bibliográfico puede ser utilizado al amparo de una licencia CC BY 4.0 Inist-CNRS
Notes:
Computer science; theoretical automation; systems
Accession Number:
edscal.18529350
Database:
PASCAL Archive
Further Information
The paper presents an architecture of an anomaly detection system based on the paradigm of artificial immune systems (AISs). Incoming network traffic data are considered by the system as signatures of potential attackers by mapping them into antigens of AISs either using some parameters of network traffic or headers of selected TCP/IP protocols. A number of methods of generation of antibodies (anomaly detectors) were implemented. The way of anomaly detection depends on the method of antibodies generation. The paper presents results of an experimental study performed with use of real data and shows how the performance of the anomaly detection system depends on traffic data coding and methods of generation of detectors.