A Comparative Study of Real-Valued Negative Selection to Statistical Anomaly Detection Techniques
The (randomized) real-valued negative selection algorithm is an anomaly detection approach, inspired by the negative selection immune system principle. The algorithm was proposed to overcome scaling problems inherent in the hamming shape-space negative selection algorithm. In this paper, we investigate termination behavior of the real-valued negative selection algorithm with variable-sized detectors on an artificial data set. We then undertake an analysis and comparison of the classification performance on the high-dimensional KDD data set of the real-valued negative selection, a real-valued positive selection and statistical anomaly detection techniques. Results reveal that in terms of detection rate, real-valued negative selection with variable-sized detectors is not competitive to statistical anomaly detection techniques on the KDD data set. In addition, we suggest that the termination guarantee of the real-valued negative selection with variable-sized detectors is very sensitive to several parameters.
A Comparative Study of Real-Valued Negative Selection to Statistical Anomaly Detection Techniques
Proceedings of the 4th International Conference on Artificial Immune Systems (ICARIS-2005)
Authors: | Thomas Stibor, Jonathan Timmis, and Claudia Eckert |
Year/month: | 2005/ |
Booktitle: | Proceedings of the 4th International Conference on Artificial Immune Systems (ICARIS-2005) |
Series: | Lecture Notes in Computer Science |
Pages: | 262-275 |
Address: | Banff, Canada |
Publisher: | Springer |
Fulltext: | click here |
Abstract |
|
The (randomized) real-valued negative selection algorithm is an anomaly detection approach, inspired by the negative selection immune system principle. The algorithm was proposed to overcome scaling problems inherent in the hamming shape-space negative selection algorithm. In this paper, we investigate termination behavior of the real-valued negative selection algorithm with variable-sized detectors on an artificial data set. We then undertake an analysis and comparison of the classification performance on the high-dimensional KDD data set of the real-valued negative selection, a real-valued positive selection and statistical anomaly detection techniques. Results reveal that in terms of detection rate, real-valued negative selection with variable-sized detectors is not competitive to statistical anomaly detection techniques on the KDD data set. In addition, we suggest that the termination guarantee of the real-valued negative selection with variable-sized detectors is very sensitive to several parameters. |
Bibtex:
@inproceedings { Stibor2005a,author = { Thomas Stibor and Jonathan Timmis and Claudia Eckert},
title = { A Comparative Study of Real-Valued Negative Selection to Statistical Anomaly Detection Techniques },
year = { 2005 },
booktitle = { Proceedings of the 4th International Conference on Artificial Immune Systems (ICARIS-2005) },
series = { Lecture Notes in Computer Science },
address = { Banff, Canada },
pages = { 262-275 },
publisher = { Springer },
url = { https://link.springer.com/chapter/10.1007/11536444_20 },
}