Research And Design Of Intrusion Detection System Based On Immune Mechanism

Nowadays, people's life is greatly affected by INTERNET, more and more communication people make with each other will depend on INTERNET. But the secure environment of network makes us worrying. As an important method to insure computer network security, intrusion detection technique is becoming one of hot research topics in information security field. The operating mechanism of intrusion detection systems is similar to the natural immune system. The theory that the immune sy stem c an p rotect b ody from i nvasion p rovides an i mportant approach t o intrusion detection.In this paper, firstly, the situation, the reason of anxiety of network security is introduced, it descript why the common security tools now is not enough to the need of security that now we wanted; secondly, the advantage and development of intrusion detection technology, the concept, development and classification and some methods of intrusion detection system are introduced; thirdly, the concept, form, mechanism and models of the human immune system are introduced, Three core techniques of immune system are analyzed, a comprehensive model of intrusion detection system based on immune mechanism is founded, combined two methods, based on misuse and based on unusual detection; then, the process of simulation of special detection is explained particularly; lastly ,make a summarize, point out the future of IDS.During the process of simulation of special detection system, information gain is used in the initiation of gene library, telling the quantity each gene takes, so it has an rigorous theory in choosing genes, the efficiency is promoted; The theory of antibody diversity in immune system is studied and used in the choice of gene, it makes the detector to find much more intrusion and promotes the efficiency. Choosing steady genes according to its large information gain and put them in essential sections and others in variable sections make detectors may detect largest area of intrusion action; the simulated special detection system is implemented, based on the study of colonal selection, negative selection, gene library evolution and antibody diversity used in immune svstem.