Study Of Network Intrusion Detection System Based On Immune Theories

Recently, more and more attacks to the information systems appear and become much harder to resist than before. The attack methods have changed from the traditional local virus attacks to the distributed, high -speed spread network attacks. Because of the inherent defects, the intrusion detection technologies we now have are not efficient for this condition. Therefore, researchers use the metaphors taken from the biological immunological theory to make an improvement on intrusion detection system (IDS).The thesis firstly presented some basic knowledge on intrusion detection and immunology, and then independently designed a network intrusion detection system model witch is based on immune theories. The system is an abnormal network intrusion detection system that runs on the LAN with distributed system configuration. The thesis researched the algorithm of creating initialization detector set applying in the process of negative selection for the IDS mode, which is the key one in the system mode. By the analyses on existing detector creation algorithms, inspired by evolution computing, improved the linear detector creation algorithm, which mostly used at present. The algorithm improved the efficiency of the linear algorithm by eliminated the reluctant detector, and at the same time ensured to cover the nonself space as much as possible.