Dendritic Cell Algorithm Research Articles

A genetic algorithm-based dendritic cell algorithm for input signal generation

A genetic algorithm-based dendritic cell algorithm for input signal generation

Dendritic Cell Algorithm with Grouping Genetic Algorithm for Input Signal Generation

The artificial immune system, an excellent prototype for developing Machine Learning, is inspired by the function of the powerful natural immune system. As one of the prevalent classifiers, the Dendritic Cell Algorithm (DCA) has been widely used to solve binary problems in the real world. The classification of DCA depends on a data pre-processing procedure to generate input signals, where feature selection and signal categorization are the main work. However, the results of these studies also show that the signal generation of DCA is relatively weak, and all of them utilized a filter strategy to remove unimportant attributes. Ignoring filtered features and applying expertise may not produce an optimal classification result. To overcome these limitations, this study models feature selection and signal categorization into feature grouping problems. This study hybridizes Grouping Genetic Algorithm (GGA) with DCA to propose a novel DCA version, GGA-DCA, for accomplishing feature selection and signal categorization in a search process. The GGA-DCA aims to search for the optimal feature grouping scheme without expertise automatically. In this study, the data coding and operators of GGA are redefined for grouping tasks. The experimental results show that the proposed algorithm has significant advantages over the compared DCA expansion algorithms in terms of signal generation.

Adaptive Dendritic Cell-Negative Selection Method for Earthquake Prediction

Earthquake prediction (EQP) is an extremely difficult task, which has been overcome by adopting various technologies, with no further transformation so far. The negative selection algorithm (NSA) is an artificial intelligence method based on the biological immune system. It is widely used in anomaly detection due to its advantages of requiring little normal data to detect anomalies, including historical seismic-events-based EQP. However, NSA can suffer from the undesirable effect of data drift, resulting in outdated normal patterns learned from data. To tackle this problem, the data changes must be detected and processed, stimulating fast algorithmic adaptation strategies. This study proposes a dendritic cell algorithm (DCA)-based adaptive learning method for drift detection and negative selection algorithm (DC-NSA) that dynamically adapts to new input data. First, this study adopts the Gutenberg–Richter (GR) law and other earthquake distribution laws to preprocess input data. Then, the NSA is employed for EQP, and then, the dendritic cell algorithm (DCA) is employed to detect changes to trigger gradient descent strategies and update the self-set in NSA. Finally, the proposed approach is implemented to predict the earthquakes of MW > 5 in Sichuan and the surroundings during the next month. The experimental results demonstrate that our proposed DC-NSA is superior to the existing state-of-the-art EQP approaches.

Illegal Intrusion Detection for In-Vehicle CAN Bus Based on Immunology Principle

The controller area network (CAN) bus has become one of the most commonly used protocols in automotive networks. Some potential attackers inject malicious data packets into the CAN bus through external interfaces for implementing illegal operations (intrusion). Anomaly detection is a technique for network intrusion detection which can detect malicious data packs by comparing the normal data packets with incoming data packets obtained from the network traffic. The data of a normal network is in a symmetric and stable state, which will become asymmetric when compromised. Considering the in-vehicle network, the CAN bus is symmetrically similar to the immune system in terms of internal network structure and external invasion threats. In this work, we use an intrusion detection method based on the dendritic cell algorithm (DCA). However, existing studies suggest the use of optimization methods to improve the accuracy of classification algorithms, and the current optimization of the parameters of the detection method mostly relies on the manual tuning of the parameters, which is a large workload. In view of the above challenges, this paper proposes a new detection algorithm based on the particle swarm optimization algorithm (PSO) and gravitational search algorithm (GSA) to improve the dendritic cell algorithm (PSO-GSA-DCA). PSO-GSA-DCA achieves adaptive parameter tuning and improves detection accuracy by mixing optimization algorithms and using them to optimize the dendritic cell algorithm classifier. Additionally, DCA-based CAN message attribute matching rules (measured by information gain and standard deviation of CAN data) are proposed for matching the three input signals (PAMP, DS, SS) of the DCA. The experimental results show that our proposed scheme has a significant improvement in accuracy, which can reach 91.64%, and lower time loss compared with other correlation anomaly detection schemes. Our proposed method also enables adaptive tuning, which solves the problem that most models now rely on manual tuning.

Enabling data-driven anomaly detection by design in cyber-physical production systems

Designing and developing distributed cyber-physical production systems (CPPS) is a time-consuming, complex, and error-prone process. These systems are typically heterogeneous, i.e., they consist of multiple components implemented with different languages and development tools. One of the main problems nowadays in CPPS implementation is enabling security mechanisms by design while reducing the complexity and increasing the system’s maintainability. Adopting the IEC 61499 standard is an excellent approach to tackle these challenges by enabling the design, deployment, and management of CPPS in a model-based engineering methodology. We propose a method for CPPS design based on the IEC 61499 standard. The method allows designers to embed a bio-inspired anomaly-based host intrusion detection system (A-HIDS) in Edge devices. This A-HIDS is based on the incremental Dendritic Cell Algorithm (iDCA) and can analyze OPC UA network data exchanged between the Edge devices and detect attacks that target the CPPS’ Edge layer. This study’s findings have practical implications on the industrial security community by making novel contributions to the intrusion detection problem in CPPS considering immune-inspired solutions, and cost-effective security by design system implementation. According to the experimental data, the proposed solution can dramatically reduce design and code complexity while improving application maintainability and successfully detecting network attacks without negatively impacting the performance of the CPPS Edge devices.

CloudIDS: Cloud Intrusion Detection Model Inspired by Dendritic Cell Mechanism

Cloud Computing Security is a new era of computer technology and opens a new research area and creates a lot of opportunity of exploration. One of the new implementation in Cloud is Intrusion Detection System (IDS).There are problems with existing IDS approach in Cloud environment. Implementing traditional IDS need a lot of self-maintenance and did not scale with the customer security requirements. In addition, maintenance of traditional IDS in Cloud Computing system requires expertise and consumes more time where not each Cloud user has. A decentralized traditional IDS approach where being deployed in current Cloud Computing infrastructure will make the IDS management become complicated. Each user's IDS will not be the same in term of type and configurations and each user may have outdated signatures. Inter VM's communication also become a big concern when we implementing Cloud Computing system where communication between Clouds are not monitored and controlled by the traditional IDS. A specific IDS model for Cloud computing is required to solve these problems. In this paper, we develop a prototype of Cloud IDS inspired by Dendritic Cell mechanism. Experiment result proved that Cloud IDS was able to detect any attempt to attack the Cloud environment. The experiments show that the Cloud IDS model based on Dendritic Cell algorithm able to identify and detect novel threat that targeting Cloud environment.

Innate immune memory and its application to artificial immune systems.

The study of innate immune-based algorithms is an important research domain in Artificial Immune System (AIS), such as Dendritic Cell Algorithm (DCA), Toll-Like Receptor algorithm (TLRA). The parameters in these algorithms usually require either manually pre-defined usually provided by the immunologists, or empirically derived from the training dataset, and result in poor self-adaptation and self-learning. The fundamental reason is that the original innate immune mechanisms lack adaptive biological theory. To solve this problem, a theory called ‘Trained Immunity™ or Innate Immune Memory (IIM)™ that thinks innate immunity can also build immunological memory to enhance the immune system™s learning and adaptive reactions to the second stimulus is introduced into AIS to improve the innate immune algorithms™ adaptability. In this study, we present an overview of IIM with particular emphasis on analogies in the AIS world, and a modified DCA with an effective automated tuning mechanism based on IIM (IIM-DCA) to optimize migration threshold of DCA. The migration threshold of Dendritic Cells (DCs) determines the lifespan of the antigen collected by DCs, and directly affect the detection speed and accuracy of DCA. Experiments on real datasets show that our proposed IIM-DCA which integrates Innate Immune Memory mechanism delivers more accurate results.

Particle Rider Mutual Information and Dendritic-Squirrel Search Algorithm With Artificial Immune Classifier for Brain Tumor Classification

AbstractMagnetic Resonance Images (MRI) is an imperative imaging modality employed in the medical diagnosis tool for detecting brain tumors. However, the major obstacle in MR images classification is the semantic gap between low-level visual information obtained by MRI machines and high-level information alleged by the clinician. Hence, this research article introduces a novel technique, namely Dendritic-Squirrel Search Algorithm-based Artificial immune classifier (Dendritic-SSA-AIC) using MRI for brain tumor classification. Initially the pre-processing is performed followed by segmentation is devised using sparse fuzzy-c-means (Sparse FCM) is employed for segmentation to extract statistical and texture features. Furthermore, the Particle Rider mutual information (PRMI) is employed for feature selection, which is devised by integrating Particle swarm optimization, Rider optimization algorithm and mutual information. AIC is employed to classify the brain tumor, in which the Dendritic-SSA algorithm designed by combining dendritic cell algorithm and Squirrel search algorithm (SSA). The proposed PRMI-Dendritic-SSA-AIC provides superior performance with maximal accuracy of 97.789%, sensitivity of 97.577% and specificity of 98%.

Towards Bio-Inspired Anomaly Detection Using the Cursory Dendritic Cell Algorithm

The autonomous and adaptable identification of anomalies in industrial contexts, particularly in the physical processes of Cyber-Physical Production Systems (CPPS), requires using critical technologies to identify failures correctly. Most of the existing solutions in the anomaly detection research area do not consider such systems’ dynamics. Due to the complexity and multidimensionality of CPPS, a scalable, adaptable, and rapid anomaly detection system is needed, considering the new design specifications of Industry 4.0 solutions. Immune-based models, such as the Dendritic Cell Algorithm (DCA), may provide a rich source of inspiration for detecting anomalies, since the anomaly detection problem in CPPS greatly resembles the functionality of the biological dendritic cells in defending the human body from hazardous pathogens. This paper tackles DCA limitations that may compromise its usage in anomaly detection applications, such as the manual characterization of safe and danger signals, data analysis not suitable for online classification, and the lack of an object-oriented implementation of the algorithm. The proposed approach, the Cursory Dendritic Cell Algorithm (CDCA), is a novel variation of the DCA, developed to be flexible and monitor physical industrial processes continually while detecting anomalies in an online fashion. This work’s contribution is threefold. First, it provides a comprehensive review of Artificial Immune Systems (AIS), focusing on AIS applied to the anomaly detection problem. Then, a new object-oriented architecture for the DCA implementation is described, enabling the modularity and abstraction of the algorithm stages into different classes (modules). Finally, the CDCA for the anomaly detection problem is proposed. The CDCA was successfully validated in two industrial-oriented dataset benchmarks for physical anomaly and network intrusion detection, the Skoltech Anomaly Benchmark (SKAB) and M2M using OPC UA. When compared to other algorithms, the proposed approach exhibits promising classification results. It was placed fourth on the SKAB scoreboard and presented a competitive performance with the incremental Dendritic Cell Algorithm (iDCA).

Multiresolution dendritic cell algorithm for network anomaly detection.

Anomaly detection in computer networks is a complex task that requires the distinction of normality and anomaly. Network attack detection in information systems is a constant challenge in computer security research, as information systems provide essential services for enterprises and individuals. The consequences of these attacks could be the access, disclosure, or modification of information, as well as denial of computer services and resources. Intrusion Detection Systems (IDS) are developed as solutions to detect anomalous behavior, such as denial of service, and backdoors. The proposed model was inspired by the behavior of dendritic cells and their interactions with the human immune system, known as Dendritic Cell Algorithm (DCA), and combines the use of Multiresolution Analysis (MRA) Maximal Overlap Discrete Wavelet Transform (MODWT), as well as the segmented deterministic DCA approach (S-dDCA). The proposed approach is a binary classifier that aims to analyze a time-frequency representation of time-series data obtained from high-level network features, in order to classify data as normal or anomalous. The MODWT was used to extract the approximations of two input signal categories at different levels of decomposition, and are used as processing elements for the multi resolution DCA. The model was evaluated using the NSL-KDD, UNSW-NB15, CIC-IDS2017 and CSE-CIC-IDS2018 datasets, containing contemporary network traffic and attacks. The proposed MRA S-dDCA model achieved an accuracy of 97.37%, 99.97%, 99.56%, and 99.75% for the tested datasets, respectively. Comparisons with the DCA and state-of-the-art approaches for network anomaly detection are presented. The proposed approach was able to surpass state-of-the-art approaches with UNSW-NB15 and CSECIC-IDS2018 datasets, whereas the results obtained with the NSL-KDD and CIC-IDS2017 datasets are competitive with machine learning approaches.

Spam message detection using Danger theory and Krill herd optimization

Due to proliferation of online posts and rise in the active social media users, fraudulent activities related with spam messages have taken a spike drift. Spam is an activity by which hackers use electronic messaging system to unsolicited messages in mass content to unknown users. It can be also taken as one of the major attraction of attackers in the form of short message service (SMS) messages. Spam messages can be categorized in different categories such as business opportunity spam, trending topic spam, banking services spam etc. These problems can be tackled by confirming to the actions taken by users towards these messages. There is an urgent explicit need of practical medium in order to assist the users against these spam messages. This paper proposes a novel SMS spam filtering model based on Danger theory of Artificial Immune System (AIS). Several feature extraction and selection techniques have been applied for optimizing the algorithm and claiming an admissible accuracy. This paper uses a biologically inspired algorithm named Krill herd Optimization (KHO) for the task of feature selection and various optimization functions like Quing function, Sumsquare function, Levy function etc. are applied for enhancing its performance. The Dendritic Cell Algorithm (DCA) is also incorporated with KHA as an added advantage towards achieving efficiency. Comparative results between Dendritic Cell Algorithm (DCA) with KHA and other spam filtering models have been shown in comparison with several state-of-the-art machine learning classifiers. The algorithms have been experimented by using varied optimization functions illustrated using visualization tools and results have been validated in the paper. The obtained results demonstrate an admissible accuracy of 96% that is calculated using different information retrieval metrics using recall, F-measure and precision.

An immune optimization based deterministic dendritic cell algorithm

An immune optimization based deterministic dendritic cell algorithm

Adaptive Dendritic Cell-Deep Learning Approach for Industrial Prognosis Under Changing Conditions

Industrial prognosis refers to the prediction of failures of an industrial asset based on data collected by Internet of Things sensors. Prognostic models can experience the undesired effects of concept drift, namely, the presence of nonstationary phenomena that affects the data collected over time. Consequently, fault patterns learned from data become obsolete. To overcome this issue, contextual and operational changes must be detected and managed, triggering rapid model adaptation mechanisms. This article presents an adaptive learning approach based on a dendritic cell algorithm for drift detection and a deep neural network model that dynamically adapts to new operational conditions. A kernel density estimator with drift-based bandwidth is used to generate synthetic data for a faster adaptation, focusing on fine-tuning the lowest neural layers. Experimental results over a real-world industrial problem shed light on the outperforming behavior of the proposed approach when compared to other drift detectors and classification models.

A new version of the deterministic dendritic cell algorithm based on numerical differential and immune response

The efficiency of the promising deterministic dendritic cell algorithm (dDCA) in terms of anomaly detection has been demonstrated in large number of studies. However, the results of these studies also show that the signal calculation phase of dDCA depends on artificial experience, while the algorithm also lacks adaptability. To overcome these limitations, we propose a new approach for anomaly detection based on dDCA, in which numerical differential and immune responses are applied. The numerical differential is introduced to provide a new method of calculating the signal values that is independent of artificial experience. In the immune response method, moreover, the immune nonlinear model is adopted to adjust the weight signal matrix of dDCA. The experimental results show that the proposed algorithm has significant advantages over the compared immune anomaly detection approaches in terms of signal calculation and adaptability.

A New Intrusion Detection System Using the Improved Dendritic Cell Algorithm

Abstract The dendritic cell algorithm (DCA) as one of the emerging evolutionary algorithms is based on the behavior of the specific immune agents, known as dendritic cells (DCs). DCA has several potentially beneficial features for binary classification problems. In this paper, we aim at providing a new version of this immune-inspired mechanism acts as a semi-supervised classifier, which can be a defensive shield in network intrusion detection problem. Till now, no strategy or idea has been adopted on the $Get_{Antigen()}$ function on the detection phase, but random sampling entails the DCA to provide undesirable results in several cycles at each time. This leads to uncertainty. Whereas it must be accomplished by biological behaviors of DCs in peripheral tissues, we have proposed a novel strategy that exactly acts based on its immunological functionalities of dendritic cells. The proposed mechanism focuses on two items: first, to obviate the challenge of needing to have a preordered antigen set for computing danger signal, and the second, to provide a novel immune-inspired idea for nonrandom data sampling. A variable functional migration threshold is also computed cycle by cycle that shows the necessity of the migration threshold flexibility. A significant criterion so-called capability of intrusion detection (CID) is used for tests. All the tests have been performed in a new benchmark dataset named UNSW-NB15. Experimental consequences demonstrate that the present schema as the best version among improved DC algorithms achieves 76.69% CID by 90% accuracy and outperforms its counterpart methods.

Study on Software Vulnerability Characteristics and Its Identification Method

A method for identifying software data flow vulnerabilities is proposed based on the dendritic cell algorithm and the improved convolutional neural network to effectively solve the transmission errors in software data flow. In this method, we first gave the software data flow propagation model and constructed the data propagation tree structure. Secondly, we analyzed the running characteristics of the software, took the interaction among indexes into account, and identified data flow vulnerabilities using the dendritic cell algorithm and the improved convolutional neural network. Finally, we conducted an in-depth study on the performance of this method and other algorithms through mathematical simulation. The results show that this method has better advantages in detection time, storage cost, and software code size.

DeepDCA: Novel Network-Based Detection of IoT Attacks Using Artificial Immune System

Recently Internet of Things (IoT) attains tremendous popularity, although this promising technology leads to a variety of security obstacles. The conventional solutions do not suit the new dilemmas brought by the IoT ecosystem. Conversely, Artificial Immune Systems (AIS) is intelligent and adaptive systems mimic the human immune system which holds desirable properties for such a dynamic environment and provides an opportunity to improve IoT security. In this work, we develop a novel hybrid Deep Learning and Dendritic Cell Algorithm (DeepDCA) in the context of an Intrusion Detection System (IDS). The framework adopts Dendritic Cell Algorithm (DCA) and Self Normalizing Neural Network (SNN). The aim of this research is to classify IoT intrusion and minimize the false alarm generation. Also, automate and smooth the signal extraction phase which improves the classification performance. The proposed IDS selects the convenient set of features from the IoT-Bot dataset, performs signal categorization using the SNN then use the DCA for classification. The experimentation results show that DeepDCA performed well in detecting the IoT attacks with a high detection rate demonstrating over 98.73% accuracy and low false-positive rate. Also, we compared these results with State-of-the-art techniques, which showed that our model is capable of performing better classification tasks than SVM, NB, KNN, and MLP. We plan to carry out further experiments to verify the framework using a more challenging dataset and make further comparisons with other signal extraction approaches. Also, involve in real-time (online) attack detection.

The deterministic dendritic cell algorithm with Haskell in earthquake magnitude prediction

The earthquake magnitude prediction is a task of utmost difficulty that has been addressed by using many different strategies, with no further transformation thus far. This work evaluates the Haskell based deterministic dendritic cell algorithm (hDCA)’s accuracy when used to predict earthquake magnitude in Sichuan and surroundings. First, eight seismicity indicators have been retrieved from the literature and used as input for the algorithms, and they are calculated from the earthquake catalog of the Sichuan and surroundings by well-known geophysical theory, named Gutenberg-Richter inverse power-law, and characteristic earthquake magnitude distribution and also conclusions drawn by recent related studies. Then, the hDCA is used to predict earthquakes with magnitude larger than 4.5 in the next month. In this work, the proposed method has been compared to the well-known machine learning algorithms, such as Dendritic Cell Algorithm (DCA), Support Vector Machine (SVM), K-Nearest Neighbor (KNN), Back Propagation Neural Network (BPNN), Recurrent Neural Network (RNN), Probabilistic Neural Network (PNN) and Neural Dynamic Classification (NDC). Overall our method yields the promising results in terms of all qualify parameters evaluated.

Detekcija napada zasnovana na veštačkom imunom sistemu

Introduction/purpose: The artificial immune system is a computational model inspired by the biological or human immune system. Of particular interest in artificial immune systems is the way the human body reacts to new pathogens and adapts to remain immune for a long period after a disease has been combated, which refers to the recognition of known malicious attacks and the way the immune system identifies self-cells not to be reacted to, which refers to the anomaly detection. Methods: Negative selection, positive selection, clonal selection, immune networks, danger theory, and dendritic cell algorithm are presented. Results: A variety of algorithms and models related to artificial immune systems and two classification principles are presented; one based on the detection of a particular attack and the other based on anomaly detection. Conclusion: Artificial immune systems are often used in intrusion detection since they are accurate and fast. Experiments show that the models can be used in both known attack and anomaly detection. Eager machine learning classifiers show better results in the decision, which is an advantage if runtime is not a significant parameter. Dendritic cell and negative selection algorithms show better results for real-time detection.

A Hybrid Fuzzy Maintained Classification Method Based on Dendritic Cells

The dendritic cell algorithm (DCA) is a classification algorithm based on the behavior of natural dendritic cells (DCs). In literature, DCA has given good classification results. However, DCA was known to be sensitive to the order of the instance classes. To solve this limitation, a fuzzy DCA version was developed stating that the cause of such sensitivity is related to the DCA crisp classification task (hypothesis 1). In this paper, we hypothesize that there is a second possible cause of such DCA sensitivity which is related to the possible existence of noisy instances presented in the DCA signal data set (hypothesis 2). Thus, we aim, first of all, to test the trueness of the latter hypothesis, and second, we aim to develop an overall hybrid DCA taking both hypotheses into consideration. Based on hypothesis 1, our new DCA focuses on smoothing the crisp classification task using fuzzy set theory. Based on hypothesis 2, a data set cleaning technique is used to guarantee the quality of the DCA signal data set. Results show that our proposed hybrid fuzzy maintained algorithm succeeds in obtaining results of interest.