Research On Model And Methods Of Bio-inspired Multidimensional Network Security

Unneglectable security risks appear when network provides free and open communication space to people. The unprecedented development of computer virus and hacker attack, together with the shortcut of information transmission, leads to increasingly severe network environment. With the increasing support strength for network security researches by the government and the increase of people's safety consciousness, theories and technologies of network security develop continuously. Though intrusion detection systems, anti-virus softwares and firewall begin to be disposed widely in network system, the security situation has not been improved definitely, needless to say the complete sovling of network security problems. In the open distributed network environment, traditional theories and methods of network security can't adapt to the deterioration of network ecological environment because of its inherent defects. As a result, a new network security model must be established to build a powerful defense system, which can solve the frequent problems of network security.Biological systems exhibit remarkable adaptation and robustness in the face of widely changing environments, inspired by which people put forward a novel approach to the research on theory and methods of network securiy:applying biological security mechanisms to the research process. However, current theory framework and implement ion technology of bio-inspired are far from maturation, and the researches on bio-inspired are all limited in the layer of human body, ignoring the layered characteristic, systematicness and multi-net parallel of biological system, which haven't broken the single-net mode in traditional network security system and cannot construct an integrated bio-inspired network security space model.On the basis of systematic and complete study of new research on relative fields, several important problems are discussed in depth and some innovations are achieved.The conception model of B-MNS is constructed, whose integrity and systematicness are verified later. By analyzing and correlating the match points of biological security mechanism and network security, a reasonable conception model of B-MNS including population scale, time stage and subnet type is estabilished, which mainly emphasizes the layered characteristic and multi-dimension. After that, the network state transition space of B-MNS proves to be a linear space.Based on the conception model, B-MNS model is quantified with the help of Markov jump theory, generating the initial mathematical model of it. Adopting HMM, the integrated mathematical model of B-MNS is set up, which has the characteristics of intelligence, evolvability and robustness.The hierachical implementation mode of B-MNS is proposed based on the mathematical model of B-MNS. The selection of implementation mode directly decides the performance exerting of B-MNS model. In the linear space, implementation modes include elementary mode, evolutive mode and advanced mode. Elementary mode is the single-net mode of traditional network security model; evolutive mode is inspired by MNP principle of biological groups; with the same biological principle, advanced mode considers the function trait of physical link.Functional analysis and verification of B-MNS model are carried out at last. According to the subordination in B-MNS, performance index can be classified into inherent attributes and service attributes. Inherent attributes are analyzed and evaluated by theoretical deduction and quantitative comparing. Service attributes are tested by Web and Ftp experiments.