Abstract

This thesis explores the design and application of artificial immune systems (AISs), problem-solving systems inspired by the human and other immune systems. AISs to date have largely been modelled on the biological adaptive immune system and have taken little inspiration from the innate immune system. The first part of this thesis examines the biological innate immune system, which controls the adaptive immune system. The importance of the innate immune system suggests that AISs should also incorporate models of the innate immune system as well as the adaptive immune system. This thesis presents and discusses a number of design principles for AISs which are modelled on both innate and adaptive immunity. These novel design principles provided a structured framework for developing AISs which incorporate innate and adaptive immune systems in general. These design principles are used to build a software system which allows such AISs to be implemented and explored.

Citations

1310	The Structure of Scientific Revolutions - Kuhn - 1962
457	A sense of self for unix processes - Forrest, Hofmeyr, et al. - 1996
340	A Secure Environment for Untrusted Helper Applications - Goldberg, Wagner, et al. - 1996
279	Detecting intrusions using system calls: Alternative data models - Warrender, Forrest, et al. - 1999
245	Intrusion Detection Using Sequences of System Calls - Hofmeyr, Forrest, et al. - 1998
245	D (2001) Intrusion detection via static analysis - Wagner, Dean
221	An Intrusion Detection Model - Denning - 1987
221	Self-nonself discrimination in a computer - Forrest, Perelson, et al. - 1994
217	Improving host security with system call policies - Provos - 2003
161	Testing Intrusion detection system: a critique of the 1998 and 1999 DARPA intrusion detection system evaluations as performed by - McHugh - 2000
152	CA: Computer immunology - Forrest, Beauchemin
150	ROC Graphs: Notes and Practical Considerations for Researchers - Fawcett - 2003
149	Execution Monitoring of Security-Critical Programs in Distributed Systems: A SpecificationBased Approach - Ko, Ruschitzka, et al. - 1997
138	A fast automatonbased method for detecting anomalous program behaviors - SEKAR, BENDRE, et al.
128	Intrusion detection systems: A survey and taxonomy - Axelsson - 2000
121	Artificial Immune System: A new Computational Intelligence Approach. 1 st edition Springer-Verlag - castro, Timmis - 2002
121	Hardening COTS software with generic software wrappers - Fraser, Badger, et al. - 1999
116	Towards a network theory of the immune system - JERNE - 1974
115	The 1999 DARPA off-line intrusion detection evaluation - Lippmann, Haines, et al.
106	Information-theoretic measures for anomaly detection - Lee, Xiang - 2001
104	Automated detection of vulnerabilities in privileged programs by execution monitoring - KO, FINK, et al. - 1994
101	Evaluating intrusion detection systems: the 1998 DARPA off-line intrusion detection evaluation - LIPPMANN, FRIED, et al. - 1999
96	The immune system, adaptation and machine learning - Farmer, Packard, et al. - 1986
96	S.: Automated response using system-call delays - Somayaji, Forrest
92	The Clonal Selection Theory of Acquired Immunity - Burnet - 1959
91	State of the practice of intrusion detection technologies - ALLEN, CHRISTIE, et al. - 2000
86	Traps and Pitfalls: Practical Problems in System Call Interposition Based Security Tools - Garfinkel - 2003
78	Towards a taxonomy of intrusion-detection systems - Debar, Dacier, et al. - 1999
76	An Immunological Model of Distributed Detection and Its Application to Computer Security - HOFMEYR - 1999
76	Measuring and Characterizing System Behavior Using Kernel-Level Event Logging - Yaghmour, Dagenais - 2000
71	A high-level programming environment for packet trace anonymization and transformation - Paxson, Pang - 2003
69	Karygiannis: Mobile Agent Security - Jansen, T - 1999
69	Implementing and Testing a Virus Throttle - Twycross, Williamson - 2003
66	Artificial Immune Systems and Their Applications - Dasgupta - 1999
63	An evening with Berferd in which a cracker is lured, endured, and studied - Cheswick - 1992
63	An Analysis of the 1999 DARPA/ Lincoln Laboratory Evaluation Data for Network Anomaly Detection - Mahoney, Chan - 2003
63	Principles of a computer immune system - SOMAYAJI, HOFMEYR, et al. - 1997
58	Intrusion detection: a brief history and overview - KEMMERER, VIGNA - 2002
56	User-level infrastructure for system call interposition: A platform for intrusion detection and confinement - Jain, Sekar - 2000
55	On the detection of anomalous system call arguments - KRUEGEL, MUTZ, et al. - 2003
55	The danger model: a renewed sense of self - Matzinger - 2002
54	Tending Adam's Garden: Evolving the Cognitive Immune Self - Cohen - 2000
54	Ostia: A Delegating Architecture for Secure System Call Interposition - Garfinkel, Pfaff, et al. - 2004
54	A methodology for testing intrusion detection systems - PUKETZA, ZHANG, et al. - 1996
49	On Gray-Box Program Tracking for Anomaly Detection - Gao, Reiter, et al.
48	Intrusion Detection Systems - Bace, Mell - 2001
47	Understanding the Linux Kernel. O’Reilly and Associates Inc., first edition - Bovet, Cesati - 2001
46	Danger Theory: The Link between AIS and IDS - Aickelin, Bentley, et al. - 2003
42	Immune System Approaches to Intrusion Detection - A Review ",Natural Computing - Aickelin, Greensmith, et al.
41	Defending Yourself: The Role of Intrusion Detection Systems - McHugh, Christie, et al. - 2000