'Malicious Code Execution Detection and Response Immune System inspired by the Danger Theory'

The analysis of system calls is one method employed by anomaly detection systems to recognise malicious code execution. Similarities can be drawn between this process and the behaviour of certain cells belonging to the human immune system, and can be applied to construct an artificial immune system. A recently developed hypothesis in immunology, the Danger Theory, states that our immune system responds to the presence of intruders through sensing molecules belonging to those invaders, plus signals generated by the host indicating danger and damage. We propose the incorporation of this concept into a responsive intrusion detection system, where behavioural information of the system and running processes is combined with information regarding individual system calls.

Detecting Danger: Applying a Novel Immunological Concept to Intrusion Detection Systems'

INTRODUCTION In recent years computer systems have become increasingly complex and consequently the challenge of protecting these systems has become increasingly difficult. Various techniques have been implemented to counteract the misuse of computer systems in the form of firewalls, antivirus software and intrusion detection systems. The complexity of networks and dynamic nature of computer systems leaves current methods with significant room for improvement. Computer scientists have recently drawn inspiration from mechanisms found in biological systems and, in the context of computer security, have focused on the human immune system (HIS). The human immune system provides an example of a robust, distributed system that provides a high level of protection from constant attacks. By examining the precise mechanisms of the human immune system, it is hoped the paradigm will improve the performance of real intrusion detection systems. This paper presents an introduction to recent developments in the field of immunology. It discusses the incorporation of a novel immunological paradigm, Danger Theory, and how this concept is inspiring artificial immune systems (AIS). Applications within the context of computer security are outlined drawing direct reference to the underlying principles of Danger Theory and finally, the current state of intrusion detection systems is discussed and improvements suggested.

Immune System Approaches to Intrusion Detection - A Review

The use of artificial immune systems in intrusion detection is an appealing concept for two reasons. Firstly, the human immune system provides the human body with a high level of protection from invading pathogens, in a robust, self-organised and distributed manner. Secondly, current techniques used in computer security are not able to cope with the dynamic and increasingly complex nature of computer systems and their security. It is hoped that biologically inspired approaches in this area, including the use of immune-based systems will be able to meet this challenge. Here we review the algorithms used, the development of the systems and the outcome of their implementation. We provide an introduction and analysis of the key developments within this field, in addition to making suggestions for future research.

An immune inspired Network Intrusion Detection System utilising correlation

Network Intrusion Detection Systems (NIDS) are computer systems which monitor a network with the aim of discerning malicious from benign activity on that network. While a wide range of approaches have met varying levels of success, most IDSs rely on having access to a database of known attack signatures which are written by security experts. Nowadays, in order to solve problems with false positive alerts, correlation algorithms are used to add additional structure to sequences of IDS alerts. However, such techniques are of no help in discovering novel attacks or variations of known attacks, something the human immune system (HIS) is capable of doing in its own specialised domain. This paper presents a novel immune algorithm for application to the IDS problem. The goal is to discover packets containing novel variations of attacks covered by an existing signature base.

Information fusion in the immune system

Biologically-inspired methods such as evolutionary algorithms and neural networks are proving useful in the field of information fusion. Artificial immune systems (AISs) are a biologically-inspired approach which take inspiration from the biological immune system. Interestingly, recent research has shown how AISs which use multi-level information sources as input data can be used to build effective algorithms for realtime computer intrusion detection. This research is based on biological information fusion mechanisms used by the human immune system and as such might be of interest to the information fusion community. The aim of this paper is to present a summary of some of the biological information fusion mechanisms seen in the human immune system, and of how these mechanisms have been implemented as AISs.

An updated evolutionary classification of CRISPR–Cas systems

The evolution of CRISPR–cas loci, which encode adaptive immune systems in archaea and bacteria, involves rapid changes, in particular numerous rearrangements of the locus architecture and horizontal transfer of complete loci or individual modules. These dynamics complicate straightforward phylogenetic classification, but here we present an approach combining the analysis of signature protein families and features of the architecture of cas loci that unambiguously partitions most CRISPR–cas loci into distinct classes, types and subtypes. The new classification retains the overall structure of the previous version but is expanded to now encompass two classes, five types and 16 subtypes. The relative stability of the classification suggests that the most prevalent variants of CRISPR–Cas systems are already known. However, the existence of rare, currently unclassifiable variants implies that additional types and subtypes remain to be characterized.

The potential impact of climate change and ultraviolet radiation on vaccine preventable infectious diseases and immunisation service delivery system

Climate change and solar ultraviolet radiation may affect vaccine-preventable infectious diseases (VPID), the human immune response process and the immunization service delivery system. We systematically reviewed the scientific literature and identified 37 relevant publications. Our study shows that climate variability and ultraviolet radiation may potentially affect VPID and the immunization delivery system through modulating vector reproduction and vaccination effectiveness, possibly influencing human immune response systems to the vaccination, and disturbing immunization service delivery. Further research is needed to determine these affects on climate-sensitive VPID and on human immune response to common vaccines. Such research will facilitate the development and delivery of optimal vaccination programs for target populations, to meet the goal of disease control and elimination.

The epidemiology of severe Streptococcus pyogenes disease in Europe

Diseases caused by the Lancefield group A streptococcus, Streptococcus pyogenes, are amongst the most challenging to clinicians and public health specialists alike. Although severe infections caused by S. pyogenes are relatively uncommon, affecting around 3 per 100,000 of the population per annum in developed countries, the case fatality is high relative to many other infections. Despite a long scientific tradition of studying their occurrence and characteristics, many aspects of their epidemiology remain poorly understood, and potential control measures undefined. Epidemiological studies can play an important role in identifying host, pathogen and environmental factors associated with risk of disease, manifestation of particular syndromes or poor survival. This can be of value in targeting prevention activities, as well directing further basic research, potentially paving the way for the identification of novel therapeutic targets. The formation of a European network, Strep-EURO, provided an opportunity to explore epidemiological patterns across Europe. Funded by the Fifth Framework Programme of the European Commission s Directorate-General for Research (QLK2.CT.2002.01398), the Strep-EURO network was launched in September 2002. Twelve participants across eleven countries took part, led by the University of Lund in Sweden. Cases were defined as patients with S. pyogenes isolated from a normally sterile site, or non-sterile site in combination with clinical signs of streptococcal toxic shock syndrome (STSS). All participating countries undertook prospective enhanced surveillance between 1st January 2003 and 31st December 2004 to identify cases diagnosed during this period. A standardised surveillance dataset was defined, comprising demographic, clinical and risk factor information collected through a questionnaire. Isolates were collected by the national reference laboratories and characterised according to their M protein using conventional serological and emm gene typing. Descriptive statistics and multivariable analyses were undertaken to compare characteristics of cases between countries and identify factors associated with increased risk of death or development of STSS. Crude and age-adjusted rates of infection were calculated for each country where a catchment population could be defined. The project succeeded in establishing the first European surveillance network for severe S. pyogenes infections, with 5522 cases identified over the two years. Analysis of data gathered in the eleven countries yielded important new information on the epidemiology of severe S. pyogenes infections in Europe during the 2000s. Comprehensive epidemiological data on these infections were obtained for the first time from France, Greece and Romania. Incidence estimates identified a general north-south gradient, from high to low. Remarkably similar age-standardised rates were observed among the three Nordic participants, between 2.2 and 2.3 per 100,000 population. Rates in the UK were higher still, 2.9/100,000, elevated by an upsurge in drug injectors. Rates from these northern countries were reasonably close to those observed in the USA and Australia during this period. In contrast, rates of reports in the more central and southern countries (Czech Republic, Romania, Cyprus and Italy) were substantially lower, 0.3 to 1.5 per 100,000 population, a likely reflection of poorer uptake of microbiological diagnostic methods within these countries. Analysis of project data brought some new insights into risk factors for severe S. pyogenes infection, especially the importance of injecting drug users in the UK, with infections in this group fundamentally reshaping the epidemiology of these infections during this period. Several novel findings arose through this work, including the high degree of congruence in seasonal patterns between countries and the seasonal changes in case fatality rates. Elderly patients, those with compromised immune systems, those who developed STSS and those infected with an emm/M78, emm/M5, emm/M3 or emm/M1 were found to be most likely to die as a result of their infection, whereas those diagnosed with cellulitis, septic arthritis, puerperal sepsis or with non-focal infection were associated with low risk of death, as were infections occurring during October. Analysis of augmented data from the UK found use of NSAIDs to be significantly associated with development of STSS, adding further fuel to the debate surrounding the role of NSAIDs in the development of severe disease. As a largely community-acquired infection, occurring sporadically and diffusely throughout the population, opportunities for control of severe infections caused by S. pyogenes remain limited, primarily involving contact chemoprophylaxis where clusters arise. Analysis of UK Strep-EURO data were used to quantify the risk to household contacts of cases, forming the basis of national guidance on the management of infection. Vaccines currently under development could offer a more effective control programme in future. Surveillance of invasive infections caused by S. pyogenes is of considerable public health importance as a means of identifying long and short-term trends in incidence, allowing the need for, or impact of, public health measures to be evaluated. As a dynamic pathogen co-existing among a dynamic population, new opportunities for exploitation of its human host are likely to arise periodically, and as such continued monitoring remains essential.

Diverse functions of restriction-modification systems in addition to cellular defense

Restriction-modification (R-M) systems are ubiquitous and are often considered primitive immune systems in bacteria. Their diversity and prevalence across the prokaryotic kingdom are an indication of their success as a defense mechanism against invading genomes. However, their cellular defense function does not adequately explain the basis for their immaculate specificity in sequence recognition and nonuniform distribution, ranging from none to too many, in diverse species. The present review deals with new developments which provide insights into the roles of these enzymes in other aspects of cellular function. In this review, emphasis is placed on novel hypotheses and various findings that have not yet been dealt with in a critical review. Emerging studies indicate their role in various cellular processes other than host defense, virulence, and even controlling the rate of evolution of the organism. We also discuss how R-M systems could have successfully evolved and be involved in additional cellular portfolios, thereby increasing the relative fitness of their hosts in the population.

High-resolution natural recording systems: intercomparisons of the response to interannual climatic variability [abstract]

The goal of this work is to examine the properties of recording mechanisms which are common to continuously recording high-resolution natural systems in which climatic signals are imprinted and preserved as proxy records. These systems produce seasonal structures as an indirect response to climatic variability over the annual cycle. We compare the proxy records from four different high-resolution systems: the Quelccaya ice cap of the Peruvian Andes; composite tree ring growth from southern California and the southwestern United States; and the marine varve sedimentation systems in the Santa Barbara basin (off California, United States) and in the Gulf of California, Mexico. An important focus of this work is to indicate how the interannual climatic signal is recorded in a variety of different natural systems with vastly different recording mechanisms and widely separated in space. These high-resolution records are the products of natural processes which should be comparable, to some degree, to human-engineered systems developed to transmit and record physical quantities. We therefore present a simple analogy of a data recording system as a heuristic model to provide some unifying concepts with which we may better understand the formation of the records. This analogy assumes special significance when we consider that natural proxy records are the principal means to extend our knowledge of climatic variability into the past, beyond the limits of instrumentally recorded data.

The first non-mammalian CXCR3 in a teleost fish: Gene and expression in blood cells and central nervous system in the grass carp (Ctenopharyngodon idella)

A novel fish chemokine receptor gene, chemokine (C-X-C motif) receptor 3 (CXCR3)-like was isolated from the grass carp Ctenopharyngodon idella , with its full-length genomic sequence. The cDNA of grass carp CXCR3-like (gcCXCR3-like) consists of 1261 bp with a 49bp 5'-UTR and a 189 bp 3'-UTR. An open reading frame of 1023 bp encodes a 341-amino acid peptide, with seven transmembrane helices. The deduced amino acid sequence showed the same sequence identities (37.8%) with its counterparts in goat and human. The gcCXCR3-like gene consists of two exons, with one intervening intron, spaced over approximately 2 kb of genomic sequence. Phylogenetic analyses clearly demonstrated that the gcCXCR3-like resembles the CXCR3s of other vertebrates. Real-time PCR analysis showed that gcCXCR3-like was expressed in all tested organs except heart and the expression level of gcCXCR3-like was highest in brain. Flow cytometric analyses showed the positive rate of labelled leukocytes from the healthy grass carp was 17.3%, and the labelled leukocytes were divided into three types by cell sorting. Immunohistochemical localization revealed that gcCXCR3-like expressed in whole brain regions including cerebel, diencephalon, medulla oblongata, optic lobe, and rhinencephalon, and that the labelled leukocytes are actually populations of monocyte and/or phagocyte, lymphocyte and the granulocyte. It is considered that fish CXCR expression and their function may need to be investigated in both nervous and immune systems. (c) 2006 Elsevier Ltd. All rights reserved.

Early effects of low dose C-12(6+) ion or X-ray irradiation on human peripheral blood lymphocytes

The aim of this study was to estimate the acute effects of low dose C-12(6+) ions or X-ray radiation on human immune function. The human peripheral blood lymphocytes (HPBL) of seven healthy donors were exposed to 0.05 Gy C-12(6+) ions or X-ray radiation and cell responses were measured at 24 h after exposure. The cytotoxic activities of HPBL were determined by 3-(4,5-dimethylthiazol-2-yl)-2,5-diphenyl tetrazolium bromide (MTT); the percentages of T and NK cells subsets were detected by flow cytometry; mRNA expression of interleukin (IL)-2, tumor necrosis factor (TNF)-alpha and interferon (IFN)-gamma were examined by real time quantitative RT-PCR (qRT-PCR); and these cytokines protein levels in supematant of cultured cells were assayed by enzyme-linked immunosorbent assays (ELISA). The results showed that the cytotoxic activity of HPBL, mRNA expression of IL-2, IFN-gamma and TNF-alpha in HPBL and their protein levels in supernatant were significantly increased at 24 h after exposure to 0.05 Gy C-12(6+) ions radiation and the effects were stronger than observed for X-ray exposure. However, there was no significant change in the percentage of T and NK cells subsets of HPBL. These results suggested that 0.05 Gy high linear energy transfer (LET) C-12(6+) radiation was a more effective approach to host immune enhancement than that of low LET X-ray. We conclude that cytokines production might be used as sensitive indicators of acute response to LDL (C) 2009 COSPAR. Published by Elsevier Ltd. All rights reserved.

An artificial immune system for continuous analysis of time-varying data

M. Neal, An Artificial Immune System for Continuous Analysis of Time-Varying Data, in Proceedings of the 1st International Conference on Artificial Immune Systems (ICARIS), 2002, eds J Timmis and P J Bentley, volume 1, pages 76-85,

Meta-stable memory in an artificial immune network

Neal, M., Meta-stable memory in an artificial immune network, Proceedings of the 2nd International Conference on Artificial Immune Systems {ICARIS}, Springer, 168-180, 2003,LNCS 2787/2003

An artificial immune system for data analysis

Timmis J and Neal M J. An artificial immune system for data analysis. In Proceedings of 3rd international workshop on information processing in cells and tissues (IPCAT), Indianapolis, U.S.A., 1999.