Skip to main content
SpringerLink
Log in

Agent-Based Artificial Immune Systems (ABAIS) for Intrusion Detections: Inspiration from Danger Theory

  • Chapter
Agent and Multi-Agent Systems in Distributed Systems - Digital Economy and E-Commerce

Part of the book series: Studies in Computational Intelligence ((SCI,volume 462))

Abstract

Agent-based artificial immune system (ABAIS) is applied to intrusion detection systems(IDS). The intelligence behind ABIDS is based on the functionality of dendritic cells in human immune systems. Antigens are profiles of system calls while corresponding behaviors are regarded as signals. ABAIS is based on the danger theory while dendritic cells agents (DC agent) are emulated for innate immune subsystem and T-cell agents (TC agent) are for adaptive immune subsystem. This ABIDS is based on the dual detections of DC agent for signals and TC agent for antigen, where each agent coordinates with other to calculate danger value (DV). According to DVs, immune response for malicious behaviors is activated by either computer host or Security Operating Center (SOC).

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Log in via an institution
Chapter
USD 29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD 84.99
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
USD 109.99
Price excludes VAT (USA)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info
Hardcover Book
USD 109.99
Price excludes VAT (USA)
  • Durable hardcover edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

Preview

Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

References

  1. The Ten Most Critical Web Application Security Vulnerabilities, 2007 update, 2002-2007 OWASP Foundation

    Google Scholar 

  2. Forrest, S., Hofmeyr, S.A., Somayaji, A., Longstaff, T.A.: A sense of self for Unix processes. In: Proceedinges of the 1996 IEEE Symposium on Research in Security and Privacy, pp. 120–128. IEEE Computer Society Press (1996)

    Google Scholar 

  3. Gu, F., Aickelin, U., Greensmith, J.: An Agent-based classification model. In: 9th European Agent Systems Summer School (EASSS 2007), Durham, UK (2007), http://arxiv.org/ftp/arxiv/papers/0910/0910.2874.pdf

  4. Bauer, A., Beauchemin, C., Perelson, A.: Agent-based modeling of host-pathogen systems: the successes and challenges. Information Sciences 179, 1379–1389 (2009)

    Article  Google Scholar 

  5. Harmer, P., Williams, P., Gunsch, G., Lamont, G.: An Artificial Immune System Architecture for Computer Security Applications. IEEE Transactions on Evolutionary Computations 65(3), 252–280 (2002)

    Article  Google Scholar 

  6. Burnet, F.: The clonal selection theory of acquired immunity. Cambridge Univerisity Press (1995)

    Google Scholar 

  7. Matzinger, P.: Tolarance, Danger and the Extended Family. Annual Review in Immunology 12, 991–1045 (1994)

    Article  Google Scholar 

  8. King, R., Russ, S., Lambert, A., Reese, D.: An Artificial Immune System Model for Intelligent Agents. Future Generation Computer Systems 17(4), 335–343 (2001)

    Article  MATH  Google Scholar 

  9. Aickelin, U., Bentley, P., Cayzer, S., Kim, J., McLeod, J.: Danger Theory: The Link between AIS and IDS? In: Timmis, J., Bentley, P.J., Hart, E. (eds.) ICARIS 2003. LNCS, vol. 2787, pp. 147–155. Springer, Heidelberg (2003)

    Chapter  Google Scholar 

  10. Kephart, J.: A Biologically Inspired Immune System for Computers. In: Artificial Life IV Proceedings of the Fourth International Workshop on the Synthesis and Simulation of Living Systems, pp. 130–139. MIT Press

    Google Scholar 

  11. Kim, J., Bentley, P., Aickelin, U., Greensmith, J., Tedesco, G., Twycross, J.: Immune system approaches to intrusion detection: a review. Natural Computing 6(4), 413–466 (2007)

    Article  MathSciNet  MATH  Google Scholar 

  12. Liu, S., Li, T., Wang, D., Zhao, K., Gong, X., Hu, X., Xu, C., Liang, G.: Immune Multi-agent Active Defense Model for Network Intrusion. In: Wang, T.-D., Li, X., Chen, S.-H., Wang, X., Abbass, H.A., Iba, H., Chen, G.-L., Yao, X. (eds.) SEAL 2006. LNCS, vol. 4247, pp. 104–111. Springer, Heidelberg (2006)

    Chapter  Google Scholar 

  13. Dasgupta, D.: Immunity-based intrusion detection systems: a general framework. In: Proceeding of the 22nd National Information Systems Security Conference, NISSC (October 1999)

    Google Scholar 

  14. Burgess, M.: Computer Immunology. In: Proceedings of the Twelfth Systems Administration Conference (LISA 1998), Boston, Mass, December 6-11 (1998)

    Google Scholar 

  15. Aickelin, U., Cayzer, S.: The danger theory and its application to ais. In: Proceedings of the First International Conference on Artificial Immune System (ICARIS 2002), pp. 141–148 (2002)

    Google Scholar 

  16. Greensmith, J., Aickelin, J., Cayzer, S.: Detecting danger, The Dendritic Cell Algorithm. Robust Intelligent Systems 12, 89–112 (2008)

    Article  Google Scholar 

  17. Kim, J., Wilson, W.O., Aickelin, U., McLeod, J.: Cooperative Automated Worm Response and Detection ImmuNe ALgorithm(CARDINAL) Inspired by T-Cell Immunity and Tolerance. In: Jacob, C., Pilat, M.L., Bentley, P.J., Timmis, J.I. (eds.) ICARIS 2005. LNCS, vol. 3627, pp. 168–181. Springer, Heidelberg (2005)

    Chapter  Google Scholar 

  18. Sarafijanović, S., Boudec, J.Y.: An Artificial Immune SYstem for Misbehavior Detection in Mobile Ad-Hoc Networks with Virtual Thymus, Clustering, Danger Signal and Memory Detectors. International Journal of Unconventional Computing 1, 221–254 (2005)

    Google Scholar 

  19. Ishida, Y.: Immunity-based Systems. A Design Perspective. Springer (2004)

    Google Scholar 

  20. Weiss, G.: Multiagent Systems, A Modern Approach to Distributed Artificial Intelligence. MIT Press (1999)

    Google Scholar 

  21. Fu, H., Yuan, X., Wang, N.: Multi-agents artificial immune system (MAAIS) inspired by danger theory for anomaly detection. In: International Conference on Computational Intelligence and Security Workshops, pp. 570–573 (2007)

    Google Scholar 

  22. Kim, J., Bentley, P.: The Artificial Immune Model for network intrusion detection. In: Proceeding of European Congress on Intelligent Techniques and Soft Computing (EUFIT 1999), Aachen, Germany (September 1999)

    Google Scholar 

  23. Scarfone, K., Mell, P.: Guide to Intrusion Detection and Prevention Systems (IDPS). Computer Security Resource Center (National Institute of Standards and Technology) (800-94) (February 2007)

    Google Scholar 

  24. Kim, J.: Integrating artificial immune algorithms for intrusion detection, Ph.D thesis, University College London (2002)

    Google Scholar 

  25. Yeom, K.-W., Park, J.-H.: An artificial immune system model for multi agents based resource discovery in distributed environments. In: Proceedings of the First International Conference on Innovative Computing, Information and Control, pp. 234–239 (2006)

    Google Scholar 

  26. Aickelin, U., Bentley, P., Cayzer, S., Kim, J., McLeod, J.: Danger Theory: The Link between AIS and IDS? In: Timmis, J., Bentley, P.J., Hart, E. (eds.) ICARIS 2003. LNCS, vol. 2787, pp. 147–155. Springer, Heidelberg (2003)

    Chapter  Google Scholar 

  27. Zhang, J., Liang, Y.: Integrating Innate and Adaptive Immunity for Worm Detection. In: Second International Workshop on Knowledge Discovery and Data Mining (WKDD 2009), pp. 693–696 (2009)

    Google Scholar 

  28. Kim, J., Bentley, P., Aickelin, U., Greensmith, J., Tedesco, G., Twycross, J.: Immune system approaches to intrusion detection-A review. Nature Computing 6, 413–466 (2007)

    Article  MathSciNet  MATH  Google Scholar 

  29. Hofmeyr, S., Forrest, S.: Immunity by Design. In: Proc. of the Genetic and Evolutionary Computation Conference (GECCO), pp. 1289–1296 (1999)

    Google Scholar 

  30. Yeom, K.-W.: Immune-inspired Algorithm for Anomaly Detection. In: Nedjah, N., Abraham, A., de Macedo Mourelle, L. (eds.) Computational Intelligence in Information Assurance and Security. SCI, vol. 57, pp. 129–154. Springer, Heidelberg (2007)

    Chapter  Google Scholar 

  31. Boukerche, A., Machado, R., Juca, K., Sobral, J., Motarem, M.: An Agent based and Biological Inspired Real-time Intrusion Detection and Security Model for Computer Network Operations. Computer Communications 20, 2649–2660 (2007)

    Article  Google Scholar 

  32. Forrest, S., Beauchemin, C.: Computer immunology. Immunological Reviews 216(1), 176–197 (2007)

    Google Scholar 

  33. Spafford, E., Zamboni, D.: Intrusion detection using autonomous agents. Computer Networks 34(4), 547–570 (2000)

    Article  Google Scholar 

  34. Greensmith, J., Aickelin, U., Tedesco, G.: Information fusion for anomaly detection with the Dendritic Cell Algorithm. Information Fusion 11, 21–34 (2010)

    Article  Google Scholar 

  35. Greensmith, J., Feyereisl, J., Aickelin, U.: The DCA: SOMe Comparison. Evolutionary Intelligence 1(2), 85–112 (2008)

    Article  Google Scholar 

  36. Greensmith, J., Aickelin, U., Cayzer, S.: Introducing Dendritic Cells as a Novel Immune-Inspired Algorithm for Anomaly Detection. In: Jacob, C., Pilat, M.L., Bentley, P.J., Timmis, J.I. (eds.) ICARIS 2005. LNCS, vol. 3627, pp. 153–167. Springer, Heidelberg (2005)

    Chapter  Google Scholar 

Download references

Author information

Authors and Affiliations

  1. Department of Information Management, Kainan University, Luchu, 338, Taiwan

    Chung-Ming Ou

  2. Department of Electrical Engineering, Hsiuping Institute of Technology, Taichung, 412, Taiwan

    C. R. Ou

  3. Department of Computer Science and Information Engineering, Hungkuang University, Taichung, 433, Taiwan

    Yao-Tien Wang

Authors
  1. Chung-Ming Ou
    View author publications

    You can also search for this author in PubMed Google Scholar

  2. C. R. Ou
    View author publications

    You can also search for this author in PubMed Google Scholar

  3. Yao-Tien Wang
    View author publications

    You can also search for this author in PubMed Google Scholar

Corresponding author

Correspondence to Chung-Ming Ou .

Editor information

Editors and Affiliations

  1. , Software and Computer Systems, KTH Royal Institute of Technology, Forum 100, Kista, SE-164 40, Sweden

    Anne Hakansson

  2. Dept. Computer Science, Franklin University, Columbus, 43215, Ohio, USA

    Ronald Hartung

Rights and permissions

Reprints and permissions

Copyright information

© 2013 Springer-Verlag Berlin Heidelberg

About this chapter

Cite this chapter

Ou, CM., Ou, C.R., Wang, YT. (2013). Agent-Based Artificial Immune Systems (ABAIS) for Intrusion Detections: Inspiration from Danger Theory. In: Hakansson, A., Hartung, R. (eds) Agent and Multi-Agent Systems in Distributed Systems - Digital Economy and E-Commerce. Studies in Computational Intelligence, vol 462. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-642-35208-9_4

Download citation

  • DOI: https://doi.org/10.1007/978-3-642-35208-9_4

  • Publisher Name: Springer, Berlin, Heidelberg

  • Print ISBN: 978-3-642-35207-2

  • Online ISBN: 978-3-642-35208-9

  • eBook Packages: EngineeringEngineering (R0)

Publish with us

Policies and ethics

Search

Navigation