Immune-Based Intrusion Detection System

Nowadays,with the development of technology ,more and more people can access to network.. Meanwhile , a problem also accompany with this trend－hacker can access to network and destroy it . Therefore , we should pay much more attention to the security of network.. In this paper, a immunity-based intrusion detection system model that we proposed is one way for security problem of network.The biological immune system is successful at protecting the animal body against a vast variety of foreign infectious. A growing number of computer scientist have carefully studied the success of this competent natural mechanism and proposed computer immune models for solving various problems including fault diagnosis, virus detection, and mortgage fraud detection.Among these various areas, intrusion detection is vigorous research areas. The main goal of intrusion detection is to detect unauthorized use, misuse and abuse of computer systems by both system insiders and external intruders. Currently many network-based intrusion detection system have been developed using diverse approaches. Nevertheless, there still remain unsolved problems to build an effective network-based intrusion detection system. As one approach (embed artificial immune system in intrusion detection system ) of providing the solution of these problems .An artificial immune system (ARTIS) is described which incorporate many properties of natural immune system, including diversity, distribute computation, error tolerance, dynamic learning and adaptation and self-monitoring. ARTIS is a general framework for distributed adaptive system and could, in principle, be applied to many domains. In this paper, we focus on investigate immunological principles in designing a multi-agent system for intrusion detection and response in network computers. In this approach, the immunity-based agents roam around the machines and monitor the situation in the network to look for changes such as malfunctions, faults, abnormalities, misuse, deviation, intrusion etc. These agents can mutually recognize each other's actives and can take appropriate actions according to the underlying security polices. specially ,their actives are coordinated in a hierarchical fashion while sensing, communicating and generating response. Such an agent can learn and adapt to its environment dynamically and can detect both known and unknown intrusion. On the basis of learning and reaching on former reach result, The author of this paper proposed the model of immunity-based intrusion detection system which is designed to be flexible, extendible, and adaptable that can perform real-time monitoring in accordance with the needs and preference of network administrators and hope that it can solve the problems existed in traditional intrusion detection system.