The detection of anomalies in unknown environments is a problem that has been approached from different perspectives with variable results. Artificial Immune Systems (AIS) present particularly advantageous characteristics for the detection of such anomalies. This research is based on an existing detector model, named Artificial Bioindicators System (ABS) which identifies and solves its main weaknesses. An ABS based anomaly classifier model is presented, incorporating elements of the AIS. In this way, a new model (R-ABS) is developed which includes the advantageous capabilities of an ABS plus the reactive capabilities of an AIS to overcome its weaknesses and disadvantages. The RABS model was tested using the well-known DARPA'98 dataset, plus a dataset built to carry out a greater number of experiments. The performance of the RABS model was compared to the performance of the ABS model based on classical sensitivity and specificity metrics, plus a response time metric to illustrate the rapid response of R-ABS relative to ABS. The results showed a better performance of R-ABS, especially in terms of detection time.
翻译:人工免疫免疫系统(AIS)是发现这种异常现象特别有利的特征,这种研究以现有的检测器模型为基础,称为人工生物指标系统(ABS),查明和解决其主要弱点,并提出了基于ABS的异常分类模型,其中包括AIS的要素。通过这种方式,开发了一个新的模型(R-ABS),其中包括ABS的有利能力,加上AIS克服其弱点和缺点的被动反应能力。RABS模型是使用众所周知的DARPA'98数据集测试的,外加为进行更多实验而建立的数据集。RABS模型的性能与ABS模型的性能进行了比较,该模型以传统的敏感性和特殊性指标为基础,加上一个反映R-ABS对ABS相对于ABS迅速反应的响应时间指标。结果显示R-ABS的性能更好,特别是在探测时间方面。