Immune System Metaphors Applied to Intrusion Detection and ：免疫系统应用于入侵检测和隐喻.ppt

Immune System Metaphors Applied to Intrusion Detection and Related Problems by Ian Nunn, SCS, Carleton University inunn@digitaldoor.net Overview of Presentation Review of immune system properties of most interest Algorithm design and the representation of application domains Examples of two recognition algorithms Overview of application areas Focus on intrusion detection systems (IDS) Advantages of IS models and future research The IS model as a swarm system Immune System Characteristics of Interest The human immune system (IS) is a system of detectors (principally B and T cells) that: After initial negative selection (tolerization), does not recognize elements of the body (self) Is adaptable in that it can recognize over time, any foreign element (non-self) including those never before encountered Remembers previous foreign element encounters Dynamically regenerates its elements Regulates the population size and diversity of its elements Is robust to input signal noise (recognition region) and detector loss Is distributed in nature with no central or hierarchical control Is error tolerant in that self recognition does not halt the system Is self-protecting since it is part of self Representation of Self/Non-Self IS elements involved are cellular proteins and their peptide sequences IS Application Algorithm Design Requires a deep understanding of the problem domain Self/non-self discrimination the fundamental IS principle Steps in designing an IS algorithm: Identification of features allowing correct and complete self/non-self discrimination* Representation or encoding of features, particularly of continuous real-valued parameters*. Ab and Ag feature strings of same length facilitate algorithm performance analysis Determination of a matching or fitness function. Important for evolution of Ab populations (affinity maturation) Selection of IS principles to apply, e.g. negative selection, costimulation, affinity maturation, etc. Approach to Feature Selection and Repr