Artificial Immune Ecosystems: the role of expert-based learning in artificial cognition

The rapid evolution of IT ecosystems significantly challenges the security models our infrastructures rely on. Beyond the old dichotomy between open and closed systems, it is now necessary to handle securely the interaction between heterogeneous devices building dynamic ecosystems. To this regard, bio-inspired approaches provide a rich set of conceptual tools, but they have failed to lay the basis for robust and efficient solutions. Our research effort intends to revisit the contribution of artificial immune system research to bring immune properties: security, resilience, distribution, memory, into IT infrastructures. Artificial immune ecosystems support a comprehensive model for anomaly detection and characterization, but their cognitive capacity are limited by the state of the art in machine learning and the rapid evolution of cybersecurity threats so far. We therefore propose to enrich the cognitive process with expert-based learning for reinforcement, classification and investigation. Application to system supervision using system logs and supervision time series confirms the relevance and performance of this model.