Adaptive and Dynamic Intrusion Detection by Means of Idiotypic Networks Paradigm
English
Ostaszewski, Marek[University of Luxembourg > Faculty of Science, Technology and Communication (FSTC) > Computer Science and Communications Research Unit (CSC) >]
Bouvry, Pascal[University of Luxembourg > Faculty of Science, Technology and Communication (FSTC) > Computer Science and Communications Research Unit (CSC) >]
The 21th IEEE International Parallel and Distributed Processing Symposium (IPDPS), NIDISC Workshop.
April 2008
[en] Intrusion detection ; Artificial Immune Systems
[en] In this paper we present a novel intrusion detection architecture based on Idiotypic Network Theory (INIDS), that aims at dealing with large scale network attacks featuring variable properties, like Denial of Service (DoS). The proposed architecture performs dynamic and adaptive clustering of the network traffic for taking fast and effective countermeasures against such high-volume attacks. INIDS is evaluated on the MIT'99 dataset and outperforms previous approaches for DoS detection applied to this set.