The Research And Implementation Of The Learning Firewall Based On Artificial Immune

As firewall is an important equipment to keep the network security, it has been impletmented in networks in majority orgnizations. Since the technology of firewall had been brought up, it has been near 20 years. In these years, this technology had made great strides forward, and the functions of firewall product had been enhanced greatly. However, the methods of network hacking take on an infinite variety of form to evade detection, the firewall based on static security role cannot fill the requirment of to keep security. Some insititutes and scholars both in home and abroad have done a lot of availability attempts on intelligentize firewall research. These attempts are aimd to build self-adapte functions on firewall in a complex network. But, neither ripe technoldge nor mature product has been brought up.Based on the current research status of firewall, this papar designed a firewall system which was with self learning functions by combining firewall technologies and machine learning technologies. This firewall could detect the attack that was not defined in security role and stop the attack going on. After an analysis of some machine learing technologies, this paper point out that aritifical immune (AI) technology was a suitable solution to build firewall self-learning functions becouse of the questions to resolve by AI and firewall were very similar and their mode of working were similar too. But, as the AI technolohy still need to be developed further, the typical immune learning algorithms could not be used in firewall, this papar designed a new algorithm which could only be used in firewall to build immune learing function.The firewall which was designed in this paper was implemented on Linux Netfilter framework. To test the performance of this firewall, the firewall was tested in two spect. One was taken to test the learing function's performance and another one to test the flowing through the firewall performance. It was proven by experiment that the firewall archieved our aim, has friendly interactive interface and would safeguard the information security in network effectively.