基于人工免疫的NIDS研究进展

现有网络入侵检测系统的关键不足在于不能识别未知模式的入侵，智能水平低。生物免疫系统的自我保护机制对设计新的网络入侵检测系统具有很好的借鉴意义。论文通过抽取生物免疫系统中所蕴涵的各种信息处理机制，将网络数据传输行为分为正常和异常行为，分别对应为网络的自我与非我，建立了一个基于人工免疫的网络入侵检测系统原型。系统中蕴涵的生物免疫机制主要有非我识别机制、免疫进化机制等。本文着重介绍此原型系统的结构和特征、免疫识别算法，并进行了实际检测实验。实验结果表明生物免疫的自我保护机制在网络入侵检测系统方面具有很强的应用前景。

NIDS Research Advance Based on Artificial Immunology

Current network intrusion detection systems have a fatal deficiency of being unable to detect new intrusive behaviors of unknown signatures and low intelligence level. The protection mechanism of the natural immune system has brought us inspirations for designing a novel network intrusion detection system. By extracting the information processing mechanism of the natural immune system, network data transferring behaviors are divided into normal and abnormal behaviors, corresponding to the self behaviors and non self behaviors of the network, and an initial network intrusion detection system is established based on artificial immunology. The main inspirations from natural immune system include non self recognition mechanism, immune evolution mechanism, etc. This paper stresses on the construction and characteristics of the system, immune recognition algorithm and the testing experiments. The result of the experiments proves that the application of the protection mechanism of natural immune system to network intrusion detection system has an exciting future.