Vulnerability Development mailing list archives

Re: Immune systems: some reading in the light of CodeGreen and CleanCR


From: missing () nts umd edu
Date: Thu, 06 Sep 2001 22:44:19 -0700

Some other useful links on computer immunity/immune systems ... T


http://www.iu.hio.no/~mark/research/AIdrift/AIdrift.html
http://www.cs.unm.edu/~immsec/

----------
Tony Link

emerson.c.tan () ca andersen com wrote:

Hello Everyone,

I've been looking at the CodeGreen thread and it has made me revisit some
old ideas about automatic/autonomous responses to worms and Virii. While
CodeGreen and CleanCR are interesting in and of themselves, the idea of an
anti-worm worm is not new, nor is the idea of a digital immune system
modeled on that of vertebrate animals.

These immune systems have to cope with all sorts of threats that a
particular individual creature has not faced before, and the way that those
immune systems pass on immunity to cells (or in this case machines or
nodes) has spured some thinking.

I suggest people interested in these ideas look at:

http://www.sciam.com/1197issue/1197kephart.html

and have a look at the article. Something like what they describe would be
a good general case solution for things like Code Red, were it to be
implemented widely and in an open source fashion. Widespread systems such
as the immune system as described would also be able to communicate to each
other, potentially walling off an outbreak before it even hit the wider
internet, thus allowing unpatched machines to go on functioning normally
until their own local immune system patched them in due course.

Anyways, it's an interesting paper, and the 1995 paper cited is well worth
reading.

Emerson
*******************Internet Email Confidentiality Footer*******************

Privileged/Confidential Information may be contained in this message.  If
you are not the addressee indicated in this message (or responsible for
delivery of the message to such person), you may not copy or deliver this
message to anyone. In such case, you should destroy this message and kindly
notify the sender by reply email. Please advise immediately if you or your
employer do not consent to Internet email for messages of this kind.
Opinions, conclusions and other information in this message that do not
relate to the official business of my firm shall be understood as neither
given nor endorsed by it.


Current thread: