Study And Implementation Of Intrusion Detection System Based On Biological Immunity

Intrusion detection is a highlighted topic of network security research in recent year. The computer criminal is more and more pressing and dangerous nowdays, which poses urgent demands on the performance of intrusion detection system. The big shortcoming of current intrusion detection system is unable to detect new type of attacks quickly and exactly. By deeply researching into the theory and all kinds of information processing mechanisms within biological immune system. Intrusion detection system models based on biological immune theory was proposed, it is made up of some subsets of detectors and distributed. Because using anomaly and misuse detection ways, efficiency of the system is higher and the system may detect unsuspected intrusion. This paper introduces the research of intrusion detection in a mass, the biological immune theory and important working mechanisms within biological immune system. And intrusion detection model based on biological immune theory is designed , effective detectors designed is primary works. The innovation of this paper foucus on creating the effective detector.Using vaccine mechanisms of biological immune system for reference, adopting both connatural detectors and self-adaptive detectors, and the connatural detectors are made up of experts'rules, it is used to detect known intrusions and choose pre-detectors. So the intrusion detection system can well and truly detect the intrusions. we use negative selection to create Self-adaptive detectors,because the self-detectors is evolutional continually, the adaptivity of the system is good and it can detect unkown intrusions;Creating pre-detectors is not random, known intrusion patterns are coded, inherited and changed to create pre-detectors. In this way, efficiency of creating valid detectors is improved. By emulational experimentation, the detecors can detect intrusions,the result can improve efficiency of detection in the future.