Applying Genetic Programming to Intrusion Detection

Abstract

This paper presents a potential solution to the intrusion detection problem in computer security. It uses a combination of work in the fields of Artificial Life and computer security. It shows how an intrusion detection system can be implemented using autonomous agents, and how these agents can be built using Genetic Programming. It also shows how Automatically Defined Functions (ADFs) can be used to evolve genetic programs that contain multiple data types and yet retain type-safety. Future work arising from this is also discussed. Introduction Genetic Programming (GP) has been used to solve many problems that occur in the real world. Koza's book (Koza 1992) has numerous examples of using GP techniques to solve problems in a variety of fields. This paper presents a new application of genetic programming to solve a problem in the field of computer security. This application will exploit the learning power of GP. In the course of designing a solution to the problem, a novel use for Auto...