Cargando…

An Immunity-Based Anomaly Detection System with Sensor Agents

This paper proposes an immunity-based anomaly detection system with sensor agents based on the specificity and diversity of the immune system. Each agent is specialized to react to the behavior of a specific user. Multiple diverse agents decide whether the behavior is normal or abnormal. Conventiona...

Descripción completa

Detalles Bibliográficos
Autores principales: Okamoto, Takeshi, Ishida, Yoshiteru
Formato: Online Artículo Texto
Lenguaje:English
Publicado: Molecular Diversity Preservation International (MDPI) 2009
Materias:
Acceso en línea:https://www.ncbi.nlm.nih.gov/pmc/articles/PMC3260637/
https://www.ncbi.nlm.nih.gov/pubmed/22291560
http://dx.doi.org/10.3390/s91109175
_version_ 1782221513442721792
author Okamoto, Takeshi
Ishida, Yoshiteru
author_facet Okamoto, Takeshi
Ishida, Yoshiteru
author_sort Okamoto, Takeshi
collection PubMed
description This paper proposes an immunity-based anomaly detection system with sensor agents based on the specificity and diversity of the immune system. Each agent is specialized to react to the behavior of a specific user. Multiple diverse agents decide whether the behavior is normal or abnormal. Conventional systems have used only a single sensor to detect anomalies, while the immunity-based system makes use of multiple sensors, which leads to improvements in detection accuracy. In addition, we propose an evaluation framework for the anomaly detection system, which is capable of evaluating the differences in detection accuracy between internal and external anomalies. This paper focuses on anomaly detection in user's command sequences on UNIX-like systems. In experiments, the immunity-based system outperformed some of the best conventional systems.
format Online
Article
Text
id pubmed-3260637
institution National Center for Biotechnology Information
language English
publishDate 2009
publisher Molecular Diversity Preservation International (MDPI)
record_format MEDLINE/PubMed
spelling pubmed-32606372012-01-30 An Immunity-Based Anomaly Detection System with Sensor Agents Okamoto, Takeshi Ishida, Yoshiteru Sensors (Basel) Article This paper proposes an immunity-based anomaly detection system with sensor agents based on the specificity and diversity of the immune system. Each agent is specialized to react to the behavior of a specific user. Multiple diverse agents decide whether the behavior is normal or abnormal. Conventional systems have used only a single sensor to detect anomalies, while the immunity-based system makes use of multiple sensors, which leads to improvements in detection accuracy. In addition, we propose an evaluation framework for the anomaly detection system, which is capable of evaluating the differences in detection accuracy between internal and external anomalies. This paper focuses on anomaly detection in user's command sequences on UNIX-like systems. In experiments, the immunity-based system outperformed some of the best conventional systems. Molecular Diversity Preservation International (MDPI) 2009-11-18 /pmc/articles/PMC3260637/ /pubmed/22291560 http://dx.doi.org/10.3390/s91109175 Text en © 2009 by the authors; licensee Molecular Diversity Preservation International, Basel, Switzerland. This article is an open access article distributed under the terms and conditions of the Creative Commons Attribution license (http://creativecommons.org/licenses/by/3.0/).
spellingShingle Article
Okamoto, Takeshi
Ishida, Yoshiteru
An Immunity-Based Anomaly Detection System with Sensor Agents
title An Immunity-Based Anomaly Detection System with Sensor Agents
title_full An Immunity-Based Anomaly Detection System with Sensor Agents
title_fullStr An Immunity-Based Anomaly Detection System with Sensor Agents
title_full_unstemmed An Immunity-Based Anomaly Detection System with Sensor Agents
title_short An Immunity-Based Anomaly Detection System with Sensor Agents
title_sort immunity-based anomaly detection system with sensor agents
topic Article
url https://www.ncbi.nlm.nih.gov/pmc/articles/PMC3260637/
https://www.ncbi.nlm.nih.gov/pubmed/22291560
http://dx.doi.org/10.3390/s91109175
work_keys_str_mv AT okamototakeshi animmunitybasedanomalydetectionsystemwithsensoragents
AT ishidayoshiteru animmunitybasedanomalydetectionsystemwithsensoragents
AT okamototakeshi immunitybasedanomalydetectionsystemwithsensoragents
AT ishidayoshiteru immunitybasedanomalydetectionsystemwithsensoragents