TUM Logo

A Comparative Study of Real-Valued Negative Selection to Statistical Anomaly Detection Techniques

The (randomized) real-valued negative selection algorithm is an anomaly detection approach, inspired by the negative selection immune system principle. The algorithm was proposed to overcome scaling problems inherent in the hamming shape-space negative selection algorithm. In this paper, we investigate termination behavior of the real-valued negative selection algorithm with variable-sized detectors on an artificial data set. We then undertake an analysis and comparison of the classification performance on the high-dimensional KDD data set of the real-valued negative selection, a real-valued positive selection and statistical anomaly detection techniques. Results reveal that in terms of detection rate, real-valued negative selection with variable-sized detectors is not competitive to statistical anomaly detection techniques on the KDD data set. In addition, we suggest that the termination guarantee of the real-valued negative selection with variable-sized detectors is very sensitive to several parameters.

A Comparative Study of Real-Valued Negative Selection to Statistical Anomaly Detection Techniques

Proceedings of the 4th International Conference on Artificial Immune Systems (ICARIS-2005)

Authors: Thomas Stibor, Jonathan Timmis, and Claudia Eckert
Year/month: 2005/
Booktitle: Proceedings of the 4th International Conference on Artificial Immune Systems (ICARIS-2005)
Series: Lecture Notes in Computer Science
Pages: 262-275
Address: Banff, Canada
Publisher: Springer
Fulltext: click here

Abstract

The (randomized) real-valued negative selection algorithm is an anomaly detection approach, inspired by the negative selection immune system principle. The algorithm was proposed to overcome scaling problems inherent in the hamming shape-space negative selection algorithm. In this paper, we investigate termination behavior of the real-valued negative selection algorithm with variable-sized detectors on an artificial data set. We then undertake an analysis and comparison of the classification performance on the high-dimensional KDD data set of the real-valued negative selection, a real-valued positive selection and statistical anomaly detection techniques. Results reveal that in terms of detection rate, real-valued negative selection with variable-sized detectors is not competitive to statistical anomaly detection techniques on the KDD data set. In addition, we suggest that the termination guarantee of the real-valued negative selection with variable-sized detectors is very sensitive to several parameters.

Bibtex:

@inproceedings { Stibor2005a,
author = { Thomas Stibor and Jonathan Timmis and Claudia Eckert},
title = { A Comparative Study of Real-Valued Negative Selection to Statistical Anomaly Detection Techniques },
year = { 2005 },
booktitle = { Proceedings of the 4th International Conference on Artificial Immune Systems (ICARIS-2005) },
series = { Lecture Notes in Computer Science },
address = { Banff, Canada },
pages = { 262-275 },
publisher = { Springer },
url = { https://link.springer.com/chapter/10.1007/11536444_20 },

}