The Hardware Implementation And Research Of The Intrusion Detection Based On Artificial Immune System

With the rapid extension and widely application of the Internet .network security .especially network intrusion .has become ever serious. The detection and analysis parts are the most important for the Intrusion Detection System. As the most of traditional Intrusion Detection Systems are static and have difficulty in coordinating with the outer dynamic situation, consequently, leading to a serial of deficiency such as limited distribution .limited accommodation and limited robust etc. Fortunately, the Human Immune System can protect themselves from the invasion of the virus, germina and all such sort of things. Meanwhile, they has a lot of excellent features such as good distribution, Self-organization,dynamic and so on and these features perform fabulous similarity on the function and characteristic with the Intrusion Detection System,which arousing people's highly attention and interesting and make the researching and development of the Intrusion Detection System based Human Immune System becoming one of the hot and the key of the network security research.The Intrusion Detection System this paper pay attention to is a kind of distribution detection which based on Negative Selection Algorithm of the artificial immune system. It is one of the network exception detection and with the watching data package method. The detection system is organized by two parts: generating the mature detectors and detecting the exception with these detectors.For the first part, this paper give a detail introduction about the basic concept and theory of the Human Immune System and Intrusion Detection System. Then making a little improvement according to the original Negative Selection Algorithm. which increasing the ability of detection. And paying attention to the hardware implementation of the Negative Selection Algorithm module: Implement the most common three match algorithms ( Rcb, Hamming Rch.) of the Negative Selection Algorithm and with the pipeline method for Rch and Hamming algorithm and put forward a universal serial detection method when dealing with the Rcb algorithm; Generate the random character strings with the Phony Random Generator which is composed by LFSR parallelly. To match more effective and correctly,design a odd and even Clock Divider (glitch-free) with the Duty Cycle of 50%.AII the hardware implementation are orientated with the speed reduction instead of area reduction. Finally, this paper give a detailed frame of the hardware implementation and do as much as sample verification for the improved Negative Selection Algorithm module compared with the original, and make sure the improvement does works.