A Comparison of Static to Biologically Modeled Intrusion Detection Systems

Traditional computer security is provided through the implementation of many unique patterns, known as signatures, each used to identify a specific threat. In a world with constantly evolving threats combined with unique new attack vectors, maintaining signatures for every individual piece of malware becomes unwieldy. A biologically modeled intrusion detection system based on the behavior of a population of ants has many advantages over traditional security measures. Each ant in the virtual colony has the ability to detect one specific metric of the current state of a computer. In combination, the results of these simple tests can point to specific attacks, while the dynamic nature of the Cooperative Infrastructure Defense (CID) offers performance benefits over the traditional static setup.

Grantor dc:publisher

Wake Forest University

Year dc:date.issued

2010

Author dc:creator

• Williams, Brian

• security

Language dc:language.iso

en_US

Handle dc:identifier.uri

http://hdl.handle.net/10339/14740

OAI identifier oai:identifier

oai:wakespace.lib.wfu.edu:10339/14740