A Cooperative AIS Framework for Intrusion Detection

Abstract— We present a cooperative intrusion detection approach inspired by biological immune system principles and P2P communication techniques to develop a distributed anomaly detection scheme. We utilize dynamic collaboration between individual artificial immune system (AIS) agents to address the well-known false positive problem in anomaly detection . The AIS agents use a set of detectors obtained through negative selection during a training phase and exchange status information and detectors on a periodical and event-driven basis, respectively. This cooperation scheme follows peer-to-peer communication principles in order to avoid a single point of failure and increase the robustness of the system. We illustrate our approach by means of two specific example scenarios in a novel network security simulator.

• Type: Conference
• Year: 2007
• Where: ICC
• Authors: Katja Luther, Rainer Bye, Tansu Alpcan, Achim Müller, Sahin Albayrak
• Keywords: Anomaly Detection, Communications, ICC 2007, Immune System, Intrusion Detection Approach