{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2024,9,5]],"date-time":"2024-09-05T18:02:14Z","timestamp":1725559334755},"publisher-location":"Berlin, Heidelberg","reference-count":36,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"type":"print","value":"9783642145469"},{"type":"electronic","value":"9783642145476"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2010]]},"DOI":"10.1007\/978-3-642-14547-6_22","type":"book-chapter","created":{"date-parts":[[2010,7,16]],"date-time":"2010-07-16T02:32:37Z","timestamp":1279247557000},"page":"276-289","source":"Crossref","is-referenced-by-count":4,"title":["Danger Theory and Intrusion Detection: Possibilities and Limitations of the Analogy"],"prefix":"10.1007","author":[{"given":"Mark","family":"Vella","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Marc","family":"Roper","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Sotirios","family":"Terzis","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","reference":[{"key":"22_CR1","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"147","DOI":"10.1007\/978-3-540-45192-1_15","volume-title":"Artificial Immune Systems","author":"U. Aickelin","year":"2003","unstructured":"Aickelin, U., Bentley, P., Cayzer, P., Kim, J., McLeod, J.: Danger theory: The link between AIS and IDS? In: Timmis, J., Bentley, P.J., Hart, E. (eds.) ICARIS 2003. LNCS, vol.\u00a02787, pp. 147\u2013155. Springer, Heidelberg (2003)"},{"key":"22_CR2","series-title":"Lecture Notes in Computer Science","volume-title":"Proceedings of ICARIS 2002","author":"U. Aickelin","year":"2002","unstructured":"Aickelin, U., Cayzer, P.: The danger theory and its application to artificial immune systems. In: Proceedings of ICARIS 2002. LNCS, Springer, Heidelberg (2002)"},{"key":"22_CR3","doi-asserted-by":"crossref","unstructured":"Axelsson, S.: The base-rate fallacy and the difficulty of intrusion detection. ACM Transactions on Information and System Security (2000)","DOI":"10.1145\/357830.357849"},{"key":"22_CR4","unstructured":"Ayara, M., Timmis, J., de Lemos, R., Duncan, R.: Negative selection: How to generate detectors. In: Proceedings of 1st ICARIS (2002)"},{"key":"22_CR5","unstructured":"Baker, A.R., Esler, J.: Snort IDS and IPS Toolkit. Syngress (2007)"},{"key":"22_CR6","volume-title":"Firewalls and Internet Security: Repelling the Wiley Hacker","author":"W. Cheswick","year":"2003","unstructured":"Cheswick, W., Bellovin, S., Rubin, A.: Firewalls and Internet Security: Repelling the Wiley Hacker, 2nd edn. Addison-Wesley, Reading (2003)","edition":"2"},{"key":"22_CR7","volume-title":"Network Security Tools","author":"J. Clarke","year":"2005","unstructured":"Clarke, J., Dhanjani, N.: Network Security Tools. O\u2019Reilly, Sebastopol (2005)"},{"key":"22_CR8","doi-asserted-by":"crossref","unstructured":"D\u2019haeseleer, P., Forrest, S., Helman, P.: An immunological approach to change detection: Algorithms, analysis, and implications. In: Proceedings of the 1996 IEEE Symposium on Security and Privacy (1996)","DOI":"10.1109\/SECPRI.1996.502674"},{"key":"22_CR9","unstructured":"Erickson, J.: Hacking: The Art of Exploitation, 2nd edn. No Starch (2008)"},{"key":"22_CR10","doi-asserted-by":"crossref","unstructured":"Forrest, S., Perelson, A., Allen, L., Cherukuri, R.: Self-nonself discrimination. In: Proceedings of the 1994 IEEE Symposium on Security and Privacy (1994)","DOI":"10.1109\/RISP.1994.296580"},{"key":"22_CR11","doi-asserted-by":"crossref","unstructured":"Greensmith, J., Aickelin, U.: The Dendritic Cell Algorithm. PhD thesis, University of Nottingham (2007)","DOI":"10.2139\/ssrn.2827962"},{"key":"22_CR12","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"291","DOI":"10.1007\/978-3-540-85072-4_26","volume-title":"Artificial Immune Systems","author":"J. Greensmith","year":"2008","unstructured":"Greensmith, J., Aickelin, U.: The deterministic dendritic cell algorithm. In: Bentley, P.J., Lee, D., Jung, S. (eds.) ICARIS 2008. LNCS, vol.\u00a05132, pp. 291\u2013302. Springer, Heidelberg (2008)"},{"key":"22_CR13","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"crossref","first-page":"153","DOI":"10.1007\/11536444_12","volume-title":"Artificial Immune Systems","author":"J. Greensmith","year":"2005","unstructured":"Greensmith, J., Aickelin, U., Cayzer, S.: Introducing dendritic cells as a novel immune-inspired algorithm for anomaly detection. In: Jacob, C., Pilat, M.L., Bentley, P.J., Timmis, J.I. (eds.) ICARIS 2005. LNCS, vol.\u00a03627, pp. 153\u2013167. Springer, Heidelberg (2005)"},{"key":"22_CR14","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"404","DOI":"10.1007\/11823940_31","volume-title":"Artificial Immune Systems","author":"J. Greensmith","year":"2006","unstructured":"Greensmith, J., Aickelin, U., Twycross, J.: Articulation and clarification of the dendritic cell algorithm. In: Bersini, H., Carneiro, J. (eds.) ICARIS 2006. LNCS, vol.\u00a04163, pp. 404\u2013417. Springer, Heidelberg (2006)"},{"key":"22_CR15","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"142","DOI":"10.1007\/978-3-540-85072-4_13","volume-title":"Artificial Immune Systems","author":"F. Gu","year":"2008","unstructured":"Gu, F., Greensmith, J., Ackelin, U.: Further exploration of the dendritic cell algorithm:Antigen multiplier and time windows. In: Bentley, P.J., Lee, D., Jung, S. (eds.) ICARIS 2008. LNCS, vol.\u00a05132, pp. 142\u2013153. Springer, Heidelberg (2008)"},{"key":"22_CR16","unstructured":"Helman, P., Forrest, S., Esponda, F.: A formal framework for positive and negative detection schemes. IEEE Transaction on Systems, Man, and Cybernetic (2004)"},{"key":"22_CR17","doi-asserted-by":"crossref","unstructured":"Helman, P., Liepins, G.: Statistical foundations of audit trail analysis for the detection of computer misuse. IEEE Transactions on Software Engineering (1993)","DOI":"10.1109\/32.241771"},{"key":"22_CR18","doi-asserted-by":"crossref","unstructured":"Hofmeyr, S., Forrest, S.: Architecture for an artificial immune system. IEEE Transactions on Evolutionary Computation (2000)","DOI":"10.1162\/106365600568257"},{"key":"22_CR19","doi-asserted-by":"crossref","unstructured":"Hofmeyr, S., Forrest, S., Somayaji, A.: Intrusion detection using sequences of system calls. Journal of Computer Security (1998)","DOI":"10.3233\/JCS-980109"},{"key":"22_CR20","volume-title":"19 Deadly Sins of Software Security: Programming Flaws and How to Fix Them","author":"M. Howard","year":"2005","unstructured":"Howard, M., Le Blanc, D., Viega, J.: 19 Deadly Sins of Software Security: Programming Flaws and How to Fix Them. McGraw-Hill\/Osborne, New York (2005)"},{"key":"22_CR21","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"42","DOI":"10.1007\/978-3-540-74320-0_3","volume-title":"Recent Advances in Intrusion Detection","author":"K.L. Ingham","year":"2007","unstructured":"Ingham, K.L., Inoue, H.: Comparing anomaly detection techniques for http. In: Kruegel, C., Lippmann, R., Clark, A. (eds.) RAID 2007. LNCS, vol.\u00a04637, pp. 42\u201362. Springer, Heidelberg (2007)"},{"key":"22_CR22","unstructured":"Kim, J., Bentley, P.: The human immune system and network intrusion detection. In: EUFIT 1999 Proceedings (1999)"},{"key":"22_CR23","unstructured":"Kim, J., Bentley, P.: An evaluation of negative selection in an artificial immune system for network intrusion detection. In: GECCO 2001 Proceedings (2001)"},{"key":"22_CR24","doi-asserted-by":"crossref","unstructured":"King, S.T., Chen, P.M.: Backtracking intrusions. In: Proceedings of the 19th ACM symposium on Operating Systems Principles, SOSP 2003 (2003)","DOI":"10.1145\/945445.945467"},{"key":"22_CR25","doi-asserted-by":"crossref","unstructured":"Kruegel, C., Vigna, G., Robertson, W.: A multi-model approach to the detection of web-based attacks. Computer Networks\u00a048(5) (2005)","DOI":"10.1016\/j.comnet.2005.01.009"},{"key":"22_CR26","unstructured":"Long, J., Bayles, A., Foster, J., Hurley, C., Petruzzi, M., Rathaus, N., Wolfgang, M.: Penetration Tester\u2019s Open Source Toolkit. Syngress (2006)"},{"key":"22_CR27","doi-asserted-by":"crossref","unstructured":"Maggi, F., Robertson, W., Kruegel, C., Vigna, G.: Protecting a moving target: Addressing web application concept drift. In: Balzarotti, D. (ed.) RAID 2009. LNCS, vol.\u00a05758, pp. 21\u201340. Springer, Heidelberg (2009)","DOI":"10.1007\/978-3-642-04342-0_2"},{"key":"22_CR28","doi-asserted-by":"crossref","unstructured":"Matzinger, P.: The danger model: A renewed sense of self. Science (2002)","DOI":"10.1126\/science.1071059"},{"key":"22_CR29","unstructured":"Northcutt, S., Zeltser, L., Winters, S., Kent, K., Ritchey, R.: Inside Network Perimeter Security. Sams (2005)"},{"key":"22_CR30","unstructured":"Riden, J., McGeehan, R., Engert, B., Mueter, M.: Web application threats. Know Your Enemy (2008)"},{"key":"22_CR31","volume-title":"Hacking Exposed - Web Applications","author":"J. Scambray","year":"2006","unstructured":"Scambray, J., Shema, M., Sima, C.: Hacking Exposed - Web Applications, 2nd edn. McGraw-Hill, New York (2006)","edition":"2"},{"key":"22_CR32","doi-asserted-by":"crossref","unstructured":"Somayaji, A., Hofmeyr, S., Forrest, S.: Principles of a computer immune system. In: Proceedings of the 1997 New Security Paradigms Workshop (1997)","DOI":"10.1145\/283699.283742"},{"key":"22_CR33","unstructured":"Twycross, J., Aickelin, U.: libtissue - a software system for incorporating innate immunity into artificial immune systems (2006), http:\/\/www.cpib.ac.uk\/~jpt\/papers\/libtissue-tecv.pdf"},{"key":"22_CR34","unstructured":"Vella, M., Roper, M., Terzis, S.: Achieving anomaly detection effectiveness beyond the symmetric error lower bound, in web-based systems (2009), http:\/\/www.cis.strath.ac.uk\/~mv\/trep1.pdf"},{"key":"22_CR35","unstructured":"Vella, M., Roper, M., Terzis, S.: Characterization of a danger context for detecting novel attacks targetig web-based systems (2010), http:\/\/www.cis.strath.ac.uk\/~mv\/trep2.pdf"},{"key":"22_CR36","doi-asserted-by":"crossref","unstructured":"Wang, W., Guyet, T., Knapskog, S.J.: Autonomic intrusion detection system. In: Balzarotti, D. (ed.) RAID 2009. LNCS, vol.\u00a05758, pp. 359\u2013361. Springer, Heidelberg (2009)","DOI":"10.1007\/978-3-642-04342-0_24"}],"container-title":["Lecture Notes in Computer Science","Artificial Immune Systems"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-642-14547-6_22.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2020,11,24]],"date-time":"2020-11-24T02:54:41Z","timestamp":1606186481000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-642-14547-6_22"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2010]]},"ISBN":["9783642145469","9783642145476"],"references-count":36,"URL":"https:\/\/doi.org\/10.1007\/978-3-642-14547-6_22","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2010]]}}}