An Immunity-based Error Containment Algorithm for Database Intrusion Response Systems

Abstract

The immune system has received a special attention as a potential source of inspiration for innovative approaches to solve database security issues and build artificial immune systems. Database security issues need to be correctly identified to ensure that suitable responses are taken. This paper proposes an immunity-based error containment algorithm for providing optimum response in detected intrusions. The objective of the proposed algorithm is to reduce the false positive alarms to the minimum since not all the incidents are malicious in nature. The proposed algorithm is based on apoptotic and necrotic signals which are parts of the immunity structure in human immune system. Apoptotic signals define low-level alerts that could result from legitimate users but could be also the prerequisites for an attack, while necrotic signals define highlevel alerts that result from actual successful attacks.

A Bio-Inspired Reaction Against Cyberattacks: AIS-Powered Optimal Countermeasures Selection

“…On the other hand, if the enforcement of cm j definitely enhances the effects generated by the enforcement of cm i , one says that the countermeasures are perfectly combinable. In this case, the combined benefit B of the enforcement of cm i and cm j can be defined as the sum of the single benefit of those countermeasures limited by the maximum possible value of this parameter (i.e., 10), as reported in Equation 12: B({cm i , cm j }) = min(B(cm i ) + B(cm j ), 10) if cm i , cm j are perfectly combinable (12) This condition expresses the best possible combination, so the combined value illustrated in Equation 12determines the upper bound of the combined value of two countermeasures.…”

“…Among those, AIS have been proved to comprise a promising paradigm in different areas of the cybersecurity ecosystem [12]. Specifically, such a bio-inspired technique aims to emulate the biological immune system's behavior in various applications of computer science.…”

Towards a Hybrid Immune Algorithm Based on Danger Theory for Database Security

“…The authors of [122] introduce an integrated solution for securing databases based on three sequential processes of security. The first process is presented in [121] to detect and prevent malicious intruders using the inspiration of the negative selection mechanism and DT model.…”