[ Pobierz całość w formacie PDF ]
ImmuneSystemforVirus
DetectionandElimination
RuneSchmidtJensen
IMM-THESIS-2002-08-31
IMM
PrintedbyIMM,DTU
3
Preface
Thisthesisiswritteninpartialfulfilmentoftherequirementsforobtaining
thedegreeofMasterofScienceinEngineeringattheTechnicalUniversityof
Denmark.Theworkhasbeencarriedoutoveraperiodof7monthsatthe
divisionforComputerScienceandEngineering,CSE,inthedepartmentof
InformaticsandMathematicalModelling,IMM,attheTechnicalUniversityof
Denmark,DTU.
Acknowledgements
Iwouldliketothankmyfamilyfortheirsupportandencouragementduring
thetimeofcompletingmymasterdegree.
Iwouldalsoliketothankmyfriendsfortheirsupportandallmyco-students
throughmyfiveyearsofstudyhereatDTU.
Finallythanksgoouttomysupervisors,RobinSharpandJørgenVilladsen,for
alltheirguidanceandinspirationduringthepreparationofthismaster’sthesis.
Lyngby,31August2002
RuneSchmidtJensen
4
5
Summary
Inthisthesisweconsidertheaspectsofdesigningacomputerimmunesystem
forvirusdetectionandeliminationusingcomponentsandtechniquesfoundin
thebiologicalimmunesystem.Alreadypublishedproposalsforconstructing
computerimmunesystemsaredescribedandanalysed.Basedontheseanalyses
andageneralintroductiontomodellingthebiologicalimmunesystemina
computerwedesignacomputerimmunesystemforvirusdetection.
Inthemodellingofthebiologicalimmunesystemweconsidertheuseofthree
di®erentkindsof
loose
matching:HammingDistance,R-ContiguousSymbols,
andHiddenMarkovModels(HMMs).Acompleteandindepthintroductionto
thetheoryofHMMswillbegivenandthealgorithmsusedinconnexionwith
HMMswillbeexplained.AframeworkforrepresentingtheHMMstogether
withthealgorithmsareimplementedinJavaaspartoftheCISpackagewhich
isthoughtofasbeingapreliminaryversionofacomputerimmunesystem.
ExperimentswithvirusinfectedprogramsandHMMsarepresented.HMMsare
trainedonstaticcodefromnon-infectedprogramsandontracesofsystemscalls
generatedbyexecutionsofnon-infectedprograms.Theprogramsareinfected
withavirusandtheHMMsabilitytodetecttheinfectionsaretested.Itis
concludedthatHMMssuccessfullycandetectvirusinfectionsinprogramsfrom
staticcodeandfromtracesofsystemcallsgeneratedbyexecutionsofprograms.
Keywords:BiologicalImmuneSystem,ComputerImmuneSystem,Hamming
Distance,R-ContiguousSymbols,HiddenMarkovModels,VirusDetection,
VirusElimination.
[ Pobierz całość w formacie PDF ]

zanotowane.pl

doc.pisz.pl

pdf.pisz.pl

mirabelkowy.keep.pl