Smartphone malware detection model based on artificial immune system

A spam detection model based on negative selection algorithm is proposed in this paper. The artificial immune system creates techniques to solve complex computations, aiming to developing immune based models. This is done by distinguishing self from non-self. Preliminary mathematical analysis will expose the computation and experimental description of the method and how it is applied to spam detection. A new detector model and matching rule model are also generated for effective matching of both self and non-self in other to burst the detector performance of the model. Our unique matching technique use in the negative selection algorithm help the model to overcome the limitation of a normal negative selection algorithm in defining harmfulness of self and non-self. This improves the requirement of the model and satisfactory requirement in terms of true positive and false positive rates. The experimental result confirms that the proposed model is able to establish a better true positive on an unknown spam Models and application in artificial immune system is coming up as an active and attractive field of great diversity. Great source of inspiration to computational model are drawn from the already knowledge of the immune system. Over the past years, rapid expansion of computer network system as change the world. It is essential for an effective computer security system because attacks and criminal intend are increasingly popular in computer network(1) . There are several measure put in place by many companies in the area of creating anti spam software based on signatures and have a very efficient performance in detecting spam fast. Though, new variation of spam and unknown spam are very difficult to detect by this software. The traditional way of detecting spam based on signature is no more efficient for today systems. Recent years, researchers are interested in the field of immune system in achieving computer security. Immune theory was first applied to computer abnormality detection by Forrest et al. After then, several proposition in the area of immune system as made tremendous success. Negative selection algorithm, while not reacting to the self cells uses the immune system capability to detect unknown antigens. Its mechanism protects body against self reactive lymphocytes. Receptors are made through a pseudo-random genetic re-arrangement process during the generation of T-cells (2); they then undergo a censoring process in the thymus called the negative selection. In this process T-cells that do not bind to self-proteins are destroyed. Therefore, immunological function and protection of the body against foreign antigens is possible through circulation of matured T-cells. Artificial negative selection algorithm was proposed to follow that pattern; generating random detectors and then discard those that match self samples. It is a spam detection in which training data from only one of the classes are available. With these illustrations, the traditional negative selection algorithm believes that all self are not dangerous and all non- self

The negative selection algorithm (NSA) is one of models in artificial immune systems. In this paper, two issues existed in traditional NSAs are described. Inspired by immune suppression mechanism, a novel framework of NSA that combining boundary selves and detectors to perform detection is proposed. By introducing the framework into V-detector algorithm, the improved algorithm is implemented and applied with synthetic data and real data. The experiment results show that the new algorithm based on immune suppression ensures better detection performance with fewer detectors.

The negative selection algorithm (NSA) is one of the important methods in the field of immunological computation (or artificial immune systems). Over the years, some progress was made that turns this algorithm (NSA) into an efficient approach to solve problems in different domain. This review takes into account these signs of progress during the last decade and categorizes those based on different characteristics and performances. Our study shows that NSA’s evolution can be labeled in four ways highlighting the most notable NSA variations and their limitations in different application domains. We also present alternative approaches to NSA for comparison and analysis. It is evident that NSA performs better for nonlinear representation than most of the other methods, and it can outperform neural-based models in computation time. We summarize NSA’s development and highlight challenges in NSA research in comparison with other similar models.

The rapid integration of cyberphysical systems (CPSs) and the Industrial Internet of Things (IIoT) has transformed industrial environments, driving advancements in autonomy, flexibility, and interconnectedness. However, this evolution introduces significant cybersecurity challenges, including vulnerability to sophisticated cyberattacks targeting critical infrastructure. Artificial immune systems (AISs), inspired by the human immune system′s adaptive and self‐regulating mechanisms, provide a promising approach for intrusion detection in dynamic industrial networks. This study conducted a systematic literature review (SLR) following the PRISMA methodology to investigate the state‐of‐the‐art applications, challenges, and research trends of AIS in industrial intrusion detection systems (IDSs). From an initial pool of 1320 records retrieved from databases like IEEE Xplore, Scopus, and Web of Science, 50 peer‐reviewed studies were selected for in‐depth analysis. The results highlight a growing adoption of AIS algorithms, including the negative selection algorithm (NSA), clonal selection algorithm (CSA), and dendritic cell algorithm (DCA), for anomaly detection, fault tolerance, and distributed control in industrial settings. Despite promising simulation‐based outcomes, challenges such as real‐time scalability, model interpretability, and infrastructure compatibility remain significant barriers. To address these gaps, this study proposes a novel conceptual framework that integrates AIS with multiagent systems (MASs) and blockchain technology, enabling autonomous detection, context‐aware decision‐making, and secure, decentralized data exchange. Future research should prioritize enhancing AIS scalability, reducing algorithmic complexity, and exploring integration with emerging technologies like explainable AI and blockchain to ensure robust, adaptive, and secure industrial systems. These findings offer critical insights for researchers and practitioners aiming to develop intelligent and resilient industrial cybersecurity solutions.

The Negative Selection (NS) algorithm is the first algorithm to come from the study of natural immune systems, and is the most widely known and applied algorithm in the field. It has been used to build intrusion detection systems along with many other security-related tasks. However, it has not been possible to use the Negative Selection algorithm on many real-world scenarios. The present research shows an optimization of the negative selection algorithm to make its execution faster. The optimized algorithm remains functionally the same, providing the same results as the unoptimized algorithm. Details are given about the optimization scheme used and the optimized negative selection algorithm is tested on the UCI Breast Cancer data set. The performance of the unoptimized negative selection algorithm is compared to the performance of the algorithm with the proposed optimization. Three claims about the function of the optimized negative selection algorithm are made and tested with four experiments. The results of the experiments are used to demonstrate that the algorithm is faster and does not change the negative selection algorithm or lower its accuracy. Although there has been research into the optimization of the Negative Selection algorithm, this work will only apply to hyper-sphere detectors, which has not been done before.

Negative selection algorithm is an important algorithm in the artificial immune system, inspired by the biological immune system. Traditional negative selection algorithms lack adaptive learning ability in high-dimensional space due to data sparsity and meaningless distance measurement. To solve these problems, an improved negative selection algorithm called Negative Selection Algorithm with Complete Random Subspace Technique (RS-NSA), is proposed in this paper. It adopts a bootstrap method to reduce the rate of misclassification resulting from the anomalies covered by the regions of normal samples. By using the complete random subspace technology, it reduces dimensionality to alleviate the curse of dimensionality. In addition, the ensemble learning technique is introduced to improve accuracy, in which component classifiers can be replaced by any negative selection algorithm. Empirical evaluation on UCI datasets reveals that, compared with V-detector, our proposed method can not only achieve a higher detection rate and a lower false alarm rate, but also shorten the training time.

This paper investigates the approaches of using an analogy of the Human Immune System (HIS) to create an Artificial Immune System (AIS) based Intrusion Detection System (IDS). The two most popular AIS generating algorithms, Negative and Clonal Selection were explored and tested on the NSL-KDD dataset with different sets of features and different numbers of detectors. The experiments show that the Negative Selection Algorithm (NSA) and the Clonal Selection Algorithm (CSA) show a severe scaling issue when handling real network traffic.

Damage analysis in composite materials using a hybrid artificial immune system

Application of the feature-detection rule to the Negative Selection Algorithm

Intrusion detection system is used to monitor the system and network activities to identify anomalies and attacks so that integrity, availability, and confidentiality can be preserved. Here an intrusion detection system based on Artificial Immune System is proposed based on Natural Killer (NK) cells with immunological memory. NK cells are created and each NK cells detection radius is determined using the negative selection algorithm and is trained to detect various attacks. Effective cells with high fairness values are proliferated and distributed to the network using clonal selection algorithm. In this paper, two types of NK cell are used-a Heavyweight NK cell (HWNK) and a number of Lightweight NK cells (LWNK). The incoming data is vectorized and Major Histocompatibility Complex Class I (MHC1) is created. Then based on this MHC1, any of the receptors i.e. Activating Receptor or Inhibiting Receptor is activated. If it is the signature of an attack, Activating Receptor is activated. Activating receptor activation results in either cytokine release or apoptosis. Here cytokine release means an alarm is generated informing the administrator and apoptosis stands for dropping of the packet. If Inhibiting Receptor is activated, it’s a normal packet there is no action taken. The technique proposed yields high accuracy, better detection rate and quick response time.

This paper presents a novel approach to an artificial immune system, which uses the rough set theory to improve its classification ability under uncertainty in data. The proposed approach is mainly based on a negative selection algorithm and is suitable to solve problems where the knowledge of non-self is scarce and noisy. The rough set theory is used to deal with uncertainty in data and to obtain rule sets necessary to specify both self and non-self classes. The proposed artificial immune system is implemented with rough valued lymphocytes, which emulate the approximate binding performed by natural immune systems.

Early detection of threats to electrical energy distribution systems helps professionals make decisions and mitigate interruptions in supply and improper activation of the protection system. Biologically inspired methods, e.g., artificial neural networks, genetic algorithms, and ant colonies, solve optimization problems and facilitate pattern recognition and decision-making. The present work presents a tool for detecting and classifying voltage disturbances based on the negative selection algorithm, which identifies and eliminates self-reactive cells, associated with multiresolution analysis, which analyzes the signal at different scales of detail, allowing a more complete understanding and detailed description of the phenomenon in question. The negative wavelet selection algorithm demonstrates robustness to detect and classify disturbances.

This thesis describes the design, development, and flight-simulation testing of an integrated Artificial Immune System (AIS) for detection, identification, and evaluation of a wide variety of sensor, actuator, propulsion, and structural failures/damages including the prediction of the achievable states and other limitations on performance and handling qualities. The AIS scheme achieves high detection rate and low number of false alarms for all the failure categories considered. Data collected using a motion-based flight simulator are used to define the self for an extended sub-region of the flight envelope. The NASA IFCS F-15 research aircraft model is used and represents a supersonic fighter which include model following adaptive control laws based on non-linear dynamic inversion and artificial neural network augmentation. The flight simulation tests are designed to analyze and demonstrate the performance of the immunity-based aircraft failure detection, identification and evaluation (FDIE) scheme. A general robustness analysis is also presented by determining the achievable limits for a desired performance in the presence of atmospheric perturbations.;For the purpose of this work, the integrated AIS scheme is implemented based on three main components. The first component performs the detection when one of the considered failures is present in the system. The second component consists in the identification of the failure category and the classification according to the failed element. During the third phase a general evaluation of the failure is performed with the estimation of the magnitude/severity of the failure and the prediction of its effect on reducing the flight envelope of the aircraft system.;Solutions and alternatives to specific design issues of the AIS scheme, such as data clustering and empty space optimization, data fusion and duplication removal, definition of features, dimensionality reduction, and selection of cluster/detector shape are also analyzed in this thesis. They showed to have an important effect on detection performance and are a critical aspect when designing the configuration of the AIS.;The results presented in this thesis show that the AIS paradigm addresses directly the complexity and multi-dimensionality associated with a damaged aircraft dynamic response and provides the tools necessary for a comprehensive/integrated solution to the FDIE problem. Excellent detection, identification, and evaluation performance has been recorded for all types of failures considered. The implementation of the proposed AIS-based scheme can potentially have a significant impact on the safety of aircraft operation. The output information obtained from the scheme will be useful to increase pilot situational awareness and determine automated

Applications of Artificial Immune System (AIS) has been widely applied in various engineering, including network security, pattern recognition, combinational optimization, machine learning and fault diagnosis, etc. Fault diagnosis is another AIS application field directly mapped from the theory of immunity after information security and has made certain achievements in research. Real-valued Negative selection algorithms (RNSA) of AIS generate their detector sets based on the points of self data. Self data is regarded as the normal pattern of behavior of the monitored system. This paper provide a new fault detection method based on RNSA of artificial immunity. It can effectively overcome the deficiency of the various fault detection methods of today that cannot implement fault detections because there are only normal samples and not enough fault samples and short of the function of continuous learning. The test result shows that, by increasing a certain number of training samples, the accuracy of fault diagnosis has made great changes. This way has obvious advantage in robustness and accuracy in detection and shows a favorable prospect of application.

A malware detection model based on a negative selection algorithm with a penalty factor is proposed to overcome the drawback of traditional negative selection algorithms in defining the harmfulness of self and nonself. The effectiveness of the proposed model is improved greatly by using the dangerous signatures that would have been discarded in the traditional negative selection algorithm. This chapter presents a malware detection model based on a negative selection algorithm with penalty factor (NSAPF). The proposed NSAPF model consists of a malware signature extraction module (MSEM) and a suspicious program detection module (SPDM). In the SPDM, signatures of suspicious programs are extracted using the malware instruction library (MIL). The chapter considers the malware candidate signature library (MCSL) as nonself and the BPMSL as self and generates a Malware Detection Signature Library (MDSL) using NSAPF. Comprehensive experimental results demonstrated that the proposed model is effective in detecting unknown malware with a lower FPRs.