The Implementation Of Innate Immunology In Computer Immune System

As the development of computer technology and popular application, all kinds of commerce activities and even people's daily life can not go on wheels without computer. More and more information productions came out to solve the problem of computer security and ensure these activities on the rails. But traditional security schemes difficult to reply these problems in time when they face to new technologies emerge in endless and new type virus and intrusion methods increasing at a very fast speed. Enlightened from the mechanism of biology immunity, computer immune system brought forward as a kind of computer security resolve scheme according to the principle of biology immunology, it make up the defect of traditional scheme at a certain extent.GECISM (General Computer Immune System Model) has the functions of immune examination, responding and adjustment, especially the ability of self-study and improvement, so it can reply the security damage and deal with it in time.Just as the innate immune is the base of biology immune system, the corresponding SandBox is not only the data provider for generating all kinds of rules, but also the primary source for judging and eliminating the "NonSelf" and be the foundation of other modules in GECISM.This paper designed a general module of SandBox based on the introduction of computer immune principle, research and discuss the main components of SandBox from the view of function as follow, the specific definition of "NonSelf, how to identify "NonSelf correctly, elimination "NonSelf and the approach to improve system performance. At last, realized an experiment system in linux environment based on the above research achievement.