Immunity-Inspired Host-Based Intrusion Detection Systems

Artificial immune system (AIS) is applied to intrusion detection systems (IDS). An IDS inspired by the danger theory of human immune system is proposed. The intelligence behind IDS is based on the functionality of dendritic cells in human immune systems and the danger theory. Antigens are profiles of system calls while corresponding behaviors are regarded as signals. This IDS is based on the dual detections of DC agent for signals and TC agent for antigen, where each agent coordinates with other to calculate danger value (DV). According to DVs, immune response for malicious behaviors is activated by either computer host or Security Operating Center.