With the fast development of Internet, the means and methods of network intrusion have become more and more complex, and the security situation of network is increasingly serious. As the second barrier of network security, the technology of Intrusion Detection System is continuously improved. Using the studies of biological immune system for reference has become the research focus on the network security technology.The reason why living organisms are able to guard effectively against and resist the invasion of a large number of pathogens from the outside world is that they have a powerful immune system. Biological immune system, through the body functions of immune recognition, immune memory, immune co-ordination, self-renewal and immune responses, can effectively recognize self and nonself and remove nonself. Through the research of the structure and characteristics of biological immune system, a lot of artificial immune algorithms have been designed. The ability of network intrusion detection is greatly enhanced, through the using of algorithms to network intrusion detection system, and the network system is more secure.The key work of the article includes:the intrusion detection techniques are discussed at the beginning; And then, the theory of biological immune system and key technologies of artificial immune system algorithm are researched and analyzed; A network intrusion detection system model based on artificial immune principle is designed in the end, and the existing IDS has been improved. The model does not use the traditional method, but the self set or a collection of nonself set variant generation to generate immature detector, which makes the immature detector evolved into a higher survival rate of mature detectors. In addition, the model combines the benefits of misuse detection and anomaly detection, and uses a set of dynamic update process to get the self set, so that the system has higher detection efficiency and adaptability. |