Research Of Network Intrusion Detection System Based On Immune Mechanism

In recent years, the network intrusion detection based on the principle of immune system has become a key research field in network intrusion detection system. Natural immune system theories, mechanisms and regulation used for intrusinon detection is his special prominent character. Besides the natural immune system has many better features, such as the variety, self-adaptability, tolerance, auto-reply etc which meet the network intrusion detection system needs well. The operating mechanism of intrusion detection system is naturally similar to the human immune system .The theory that the immune system can protect body from intrusion provides an important approach to investigating the intrusion detection technique. The application of Vaccine injection technology can strengthen the amimal immunity. At present, the majority of commercialized network intrusion detection products just adapt the simple template match technique which can be only adapted for some simple attack modes with a high misrepresentation rate and can't adapt to the current changing environments. Therefore, using animal immune theory for network intrusion detection system can improve the security of computer network and detect unknown attack modes that other systems can't achieve. The thesis that construct a level model of NIDS based on immune mechanism use the principle of animal immune and the technology of vaccine injection.Using the similarity of the vaccine injection technology, the CPK attestation algorithm applies into network intrusion detection system based on immune mechanism. The CPK attestation technology is an identity attestation system realied by the public key(CPK) algorithm. The system based on CPK credible logic is one kind of credible attestation technology. The main target of both vaccine injection and credible attestation of CPK is to strengthen immunity and compare vaccine injection with CPK credible attestation through tow aspects of the distinguishing self from nonself and how to strengthen the systematic immunity. And build lever model of network intrusion detection based on immune mechanism. Also suggest the algorithm of CPK attestation and realizes it through experiment.The innovative:1. Apply CPK credible attestation to network intrusion detection system based on immune mechanism which strengthen the immunity of system.2. Build level model of network intrusion detection system based on immune mechanism and algorithm of CPK credible attestation applied to this level model.3. Characteristic analyse method based on characteristic element chain.The paper is consisted by five chapters:Chapter 1: Background and main content of research.Chapter 2: Introduce and analyse the attack characteristic that the network attack. Summary the relevance concept and principle of intrusion and intrusion detection. Describe future technology developing trend based on classify and fuction of intrusion detection.Chapter 3: Discuss the relevant thesis of the animal immune system. Contract the similarity of intrusion detection with animal immune mechanism including composition and function of animal immune system, self-identify and nonself-identify, diversity of antigen and antibody, negative selection, colonal selection, immune memory mechanism, animal immune character.Chapter 4: Constructe leverl model of network intrusion detection based on immune mechanism that including data collect module, turban analysis and characteristic drawing module, vaccine injection and the antibody generate module, detecting-report module, regulation update module.Chapter 5: Design and realization of the key technology of network intrusion detection system based on immune mechanism and analysis the result of experiment.