Application Research Of The Intrusion Tolerance System Based On Biological Immune Theory

Intrusion tolerance system (ITS) is a new approach of computer security which has slowly emerged during the past decade, and obtained more attention in recent years. Instead of the traditional security method that trying to prevent every single intrusion, the ITS allow the intrusion appear, and its has a tolerance mechanisms that prevent the intrusion from generating a system security failure and provide normal or graceful degradation service for users.The dissertation analyzed the vulnerability of the current security methods firstly, then the concept of the Intrusion tolerance system was given, and then classified the ITS in terms of the different criterions, discussed the main technologies and mechanisms for architecting ITS, and reported the recent advances on ITS. Secondly, the paper introduced the biological immune system, emphasized the adaptability of the immune that is a theory based for the paper. Subsequently, we designed a ITS model based on the biological immune theory which has a multi-framework and integrate protect capability, discussed the composing means and the function for the part of model. Under the architectures, this paper paid more attention to the intrusion trigger mechanisms with the biological immune theory, and an improved immunity-based trigger for Intrusion Tolerance System (IIBT) was proposed. Moreover, a detail description was given to the module architecture, the formalized definition and the mathematical expressions in detail. Finally, a immune-transplant structure was bringing forward which aimed to solve the security problem of the process transplant in the ITS, and regarded it as a security reference model to keep the survivability and the durative for ITS.The conclusion of this paper is realistic both in theory and in application for designed the ITS form the biological immune view, and has a reference function for ITS in the next development.