An immunological model for detecting bot activities

Md E. Karim, Vir V. Phoha, Md A. Sultan

Research output: Chapter in Book/Report/Conference proceedingConference contribution

Abstract

We develop a hierarchical immunological model to detect bot activities in a computer network. In the proposed model antibody (detector)-antigen (foreign object) reactions are defined using negative selection based approach and negative systems-properties are defined by various temporal as well as non-temporal systems features. Theory of sequential hypothesis testing has been used in the literature for identifying spatial-temporal correlations among malicious remote hosts and among the bots within a botnet. We use it for combining multiple immunocomputing based decisions too. Negative selection based approach defines a self and helps identifying non-selves. We define non-selves with respect to various systems characteristics and then use different combinations of non-selves to design bot detectors. Each detector operates at the client sites of the network under surveillance. A match with any of the detectors suggests presence of a bot. Preliminary results suggest that the proposed model based solutions c n improve the identification of bot activities.

Original languageEnglish (US)
Title of host publicationIntelligent Sensing, Situation Management, Impact Assessment, and Cyber-Sensing
Edition1
DOIs
StatePublished - Sep 10 2009
Externally publishedYes
EventIntelligent Sensing, Situation Management, Impact Assessment, and Cyber-Sensing - Orlando, FL, United States
Duration: Apr 15 2009Apr 17 2009

Publication series

NameProceedings of SPIE - The International Society for Optical Engineering
Number1
Volume7352
ISSN (Print)0277-786X

Other

OtherIntelligent Sensing, Situation Management, Impact Assessment, and Cyber-Sensing
CountryUnited States
CityOrlando, FL
Period4/15/094/17/09

Keywords

  • Botnet
  • Immunocomputing
  • Negative selection algorithm
  • Spatial-temporal correlation

ASJC Scopus subject areas

  • Electronic, Optical and Magnetic Materials
  • Condensed Matter Physics
  • Computer Science Applications
  • Applied Mathematics
  • Electrical and Electronic Engineering

Fingerprint Dive into the research topics of 'An immunological model for detecting bot activities'. Together they form a unique fingerprint.

  • Cite this

    Karim, M. E., Phoha, V. V., & Sultan, M. A. (2009). An immunological model for detecting bot activities. In Intelligent Sensing, Situation Management, Impact Assessment, and Cyber-Sensing (1 ed.). [73520U] (Proceedings of SPIE - The International Society for Optical Engineering; Vol. 7352, No. 1). https://doi.org/10.1117/12.819073