Genetic Programming and Evolvable Machines

, Volume 4, Issue 4, pp 383-403

First online:

Anomaly Detection Using Real-Valued Negative Selection

  • Fabio A. GonzálezAffiliated withDivision of Computer Science, The University of MemphisDepartamento de Ingeniería de Sistemas, Universidad Nacional de Colombia
  • , Dipankar DasguptaAffiliated withDivision of Computer Science, The University of Memphis

Rent the article at a discount

Rent now

* Final gross prices may vary according to local VAT.

Get Access


This paper describes a real-valued representation for the negative selection algorithm and its applications to anomaly detection. In many anomaly detection applications, only positive (normal) samples are available for training purpose. However, conventional classification algorithms need samples for all classes (e.g. normal and abnormal) during the training phase. This approach uses only normal samples to generate abnormal samples, which are used as input to a classification algorithm. This hybrid approach is compared against an anomaly detection technique that uses self-organizing maps to cluster the normal data sets (samples). Experiments are performed with different data sets and some results are reported.

artificial immune systems anomaly detection negative selection matching rule self-organizing maps