Hybrid Negative Selection Approach for Anomaly Detection

Andrzej Chmielewski (1) , Sławomir T. Wierzchoń (2, 3)

1 Białystok University of Technology
2 GUT - Gdańsk University of Technology
3 PAN - Polska Akademia Nauk = Polish Academy of Sciences = Académie polonaise des sciences

This paper describes a b-v model which is enhanced version of the negative selection algorithm (NSA). In contrast to formerly developed approaches, binary and real-valued detectors are simultaneously used. The reason behind developing this hybrid is our willingness to overcome the scalability problems occuring when only one type of detectors is used. High-dimensional datasets are a great challenge for NSA. But the quality of generated detectors, duration of learning stage as well as duration of classification stage need a careful treatment also. Thus, we discuss various versions of the b-v model developed to increase its efficiency. Versatility of proposed approach was intensively tested by using popular testbeds concerning domains like computer’s security (intruders and spam detection) and recognition of handwritten words.

Mots clés: Artificial immune system; anomaly detection; multi-dimensional data

Domaines: Informatique [cs]; Sciences de l'information et de la communication

Andrzej Chmielewski, Sławomir T. Wierzchoń. Hybrid Negative Selection Approach for Anomaly Detection. 11th International Conference on Computer Information Systems and Industrial Management (CISIM), Sep 2012, Venice, Italy. pp.242-253, ⟨10.1007/978-3-642-33260-9_21⟩. ⟨hal-01551730⟩