Please use this identifier to cite or link to this item:
Title: Danger theory and intrusion detection : possibilities and limitations of the analogy
Authors: Vella, Mark Joseph
Roper, Marc
Terzis, Sotirios
Keywords: Intrusion detection systems (Computer security)
Anomaly detection (Computer security)
Coding theory
Computer security
Data encryption (Computer science)
Issue Date: 2010
Publisher: Springer
Citation: Vella, M., Roper, M., & Terzis, S. (2010, July). Danger theory and intrusion detection: Possibilities and limitations of the analogy. International Conference on Artificial Immune Systems, Germany. 276-289.
Abstract: Metaphors derived from Danger Theory, a hypothesized model of how the human immune system works, have been applied to the intrusion detection domain. The major contribution in this area, is the dendritic cell algorithm (DCA). This paper presents an in-depth analysis of results obtained from two previous experiments, regarding the suitability of the danger theory analogy in constructing intrusion detection systems for web applications. These detectors would be capable of detecting novel attacks while improving on the limitations of anomaly based intrusion detectors. In particular, this analysis investigates which aspects of this analogy are suitable for this purpose, and which aspects of the analogy are counterproductive if utilized in the way originally suggested by danger theory. Several suggestions are given for those aspects of danger theory that are identified to require modification, indicating the possibility of further pursuing this approach. These modifications could be realized in terms of developing a robust signal selection schema and a suitable correlation algorithm. This would allow for an intrusion detection approach that has the potential to overcome those limitations presently associated with existing techniques.
Appears in Collections:Scholarly Works - FacICTCS

Files in This Item:
File Description SizeFormat 
  Restricted Access
245.85 kBAdobe PDFView/Open Request a copy

Items in OAR@UM are protected by copyright, with all rights reserved, unless otherwise indicated.