An approach to intrusion detection by means of idiotypic networks paradigm

Author

Ostaszewski, Marek ; Bouvry, Pascal ; Seredynski, Franciszek

Author_Institution

Technol. & Commun., Luxembourg Univ., Luxembourg City

fYear

2008

fDate

1-6 June 2008

Firstpage

2099

Lastpage

2108

Abstract

In this paper we present a novel intrusion detection architecture based on Idiotypic Network Theory (INIDS), that aims at dealing with large scale network attacks featuring variable properties, like Denial of Service (DoS). The proposed architecture performs dynamic and adaptive clustering of the network traffic for taking fast and effective countermeasures against such high-volume attacks. INIDS is evaluated on the MITpsila99 dataset and outperforms previous approaches for DoS detection applied to this set.

Keywords

computer network management; pattern clustering; security of data; telecommunication security; adaptive clustering; denial of service; dynamic clustering; idiotypic network theory; idiotypic networks paradigm; intrusion detection architecture; large scale network attacks; network traffic; Computer crashes; Computer crime; Computer networks; Databases; Floods; Information resources; Intrusion detection; Pattern analysis; Pattern recognition; Telecommunication traffic;

fLanguage

English

Publisher

ieee

Conference_Titel

Evolutionary Computation, 2008. CEC 2008. (IEEE World Congress on Computational Intelligence). IEEE Congress on

Conference_Location

Hong Kong

Print_ISBN

978-1-4244-1822-0

Electronic_ISBN

978-1-4244-1823-7

Type

conf

DOI

10.1109/CEC.2008.4631077

Filename

4631077