一种基于免疫机理的入侵检测系统模型

在比较了生物免疫系统和入侵检测系统的相似性后,在入侵检测系统中引入了免疫相关机理,建立了一种基于免疫机理的入侵检测系统模型,并对系统模型中涉及的关键技术进行了详细阐述。在模型检测器的生成规则中首次提出并运用了n-r规则,在检测器的生成算法中将克隆选择、否定选择和思维进化相结合,提出了一种全新的算法。理论分析表明该系统模型能有效检测已知和未知的攻击活动,也为解决入侵检测系统的高误报率和缺乏自适应性的难题提供了思路。

A Novel Model for Intrusion Detection System Based on Immune Mechanism

After comparing Biological Immune System(BIS) with Intrusion Detection System(IDS),this paper built a new model for IDS based on immune mechanism.It discussed the key technology about this system in detail.This paper proposed n-r matching rule which was applied to detector's building at the first time.Duing the detector producting,a novel algorithm was also presented,involving clonal selection,negative selection and mind evolution.The theoretical analysis shows the model is efficient in detetecing known and unknown intrusion.It provides a favourable approach to reduce false positive errors and to approve self-adaptability,too.