Danger Theory Concepts Improving Malware Detection of Intrusion Detection Systems That Uses Exact Graphs

This paper describes the development of an intrusion detection system (IDS) that incorporates ideas of danger theory which enhances the IDS´s performance when compared to not using danger theory. Both systems use Exact Graphs to store the series of system calls in the database. Both the original and enhanced IDSs were first trained using a series of normal system calls. In the enhanced IDS, the system also responds to hardware signals changes which correspond to danger signals. Results of the comparison show that the danger theory enhanced system outperforms the original system.