'Malicious Code Execution Detection and Response Immune System inspired by the Danger Theory'

Kim, Jungwon; Greensmith, Julie; Twycross, Jamie; Aickelin, Uwe

Abstract

The analysis of system calls is one method employed by anomaly detection systems to recognise malicious code execution. Similarities can be drawn between this process and the behaviour of certain cells belonging to the human immune system, and can be applied to construct an artificial immune system. A recently developed hypothesis in immunology, the Danger Theory, states that our immune system responds to the presence of intruders through sensing molecules belonging to those invaders, plus signals generated by the host indicating danger and damage. We propose the incorporation of this concept into a responsive intrusion detection system, where behavioural information of the system and running processes is combined with information regarding individual system calls.

Citation

Kim, J., Greensmith, J., Twycross, J., & Aickelin, U. 'Malicious Code Execution Detection and Response Immune System inspired by the Danger Theory'. Presented at Adaptive and Resilient Computing Security Workshop (ARCS-05)

• Conference Name: Adaptive and Resilient Computing Security Workshop (ARCS-05)
• Publication Date: Jan 1, 2005
• Deposit Date: Oct 22, 2007
• Publicly Available Date: Oct 22, 2007
• Peer Reviewed: Peer Reviewed
• DOI: https://doi.org/10.2139/ssrn.2832006
• Public URL: https://nottingham-repository.worktribe.com/output/1020446