You might be interested in this: https://www.cs.unm.edu/~forrest/publications/ieee-sp-96-unix.pdf https://www.cs.unm.edu/~forrest/publications/ieee-sp-96-unix..

You might be interested in this: https://www.cs.unm.edu/~forrest/publications/ieee-sp-96-unix.pdf https://www.cs.unm.edu/~forrest/publications/ieee-sp-96-unix... It's a scheme for Unix process intrusion detection based on principles of a biological immune system.