Denial of service detection and analysis using idiotypic networks paradigm

In this paper we present a novel intrusion detection architecture based on Idiotypic Network Theory (INIDS), that aims at dealing with large scale network attacks featuring variable properties, like Denial of Service (DoS). The proposed architecture performs dynamic and adaptive clustering of the network traffic for taking fast and effective countermeasures against such high-volume attacks. INIDS is evaluated on the MIT’99 dataset and outperforms previous approaches for DoS detection applied to this set. Categories and Subject Descriptors: C.2.3 [ComputerCommunication Networks, Network Operations]: Network Monitoring General Terms: Security.

• Type: Conference
• Year: 2008
• Where: GECCO
• Authors: Marek Ostaszewski, Pascal Bouvry, Franciszek Seredynski
• Keywords: GECCO 2008, Idiotypic Network Theory, Intrusion Detection Architecture, Optimization, Scale Network Attacks