Rollback, Backup And Obstruction In Computer Immune System GECISM

The natural immune system protects the body from the complex environment by distinguishing between exterior antigen and self's organism. It is a high parallel, distributed, self-adapting, self-organizing system.The paper researches the computer immune system GECISM(GEneral Computer Immune System Model). GECISM which constituted by intelligent agents is a production of the immune system application in the computer security field. Intelligent agent could eliminate a certain detected "non-self with the cooperation of the others through related response. For robustness, "Adjacent Point" technology ensure GECISM work in gear when one of the intelligent agents is in invalidation. And in order to satisfy users' different demands and decrease the overhead of system, GECISM adopt three configuration strategies: static configuration, dynamic configuration and super-dynamic configuration, which could applied to different scale networks to meet varies of security-level requirements.It is very important to solve the rollback, backup and obstruction issue in GECISM. By comparing several different checkpoint mechanism, the TD agent in GECISM utilizes BRAS(Buffering RollbAck System) to realize its function, and makes the system rollback to the recent cleanliness status, reduces loss.In the end, it analyse the procedure of kernel system call in Linux operating system.Then a prototype of TD Agent is implemented based on Linux LKM(Loadable Kernel Module) technology, and performance of TD Agent is evaluated to prove that BRAS is feasible.