Research For Intrusion Prevention Model And Technique Based On Human Immune System

The intrusion Prevention technique is an important method to insure the computer network security It is becoming one of hot research topics in information security field.In this paper, firstly, the human immune mechanisms such as special recognition, negative selection, affinity maturation, gene library and antibody diversity are analyzed. The similarity and difference between the human immune system and the artificial immune system is compared. Based on the LISYS, an intrusion prevention model is designed to stimulate imperfect detection, negative selection, memory recognition, colonal selection, and special detector generation. The model is distributed, adaptable and robust. And the model can defense the attacking from the Internet realtime with the cooperating of the Firewall.Secondly, the detectors algorithm such as Negative algorithm, Dynamic Colonal algorithm are analyzed, and monoclonal operator standard clonal selection algorithm(MosCS) is released. In the paper, the Random death policy of the Memory Detectors is replaced by Longest Time not Used policy.Thirdly, the detect cost of Detectors in LISYS is analyzed. A solution that build normal pattern filter is declared.