Stephanie Forrest - Santa Fe Institute
Students: Spring 2025, unless noted otherwise, sessions will be virtual on Zoom.
Immunology and Intrusion Detection
Jan 14, 2000
Abstract
Natural immune systems are sophisticated information processors. They learn to recognize relevant patterns, they remember patterns that have been seen previously, they use combinatorics to construct pattern detectors efficiently, and they use diversity to promote robustness. Further, the individual cells and molecules that comprise the immune system are distributed throughout our bodies, encoding and controlling the system in parallel with no central control mechanism.The talk will describe recent progress on several related projects which are incorporating principles and mechanisms from immunology into computer security. It will emphasize recent work on host-based and network-based intrusion detection. In the host-based system, normal behavior is defined by short-range correlations in a process's system calls---a much simpler approach than that used previously. Experiments suggest that the definition is stable during normal behavior and that it is sensitive to several common intrusions. In the network-based system, normal behavior is characterized using TCP/IP packets, and several immune-inspired mechanisms are employed to create a distributed and robust approach to network security.
About the Speaker

Ways to Watch
