Research Of Intrusion Detection Model Based On Artificial Immunity

With the rapid development of the computer and network technology, computer application has become more and more broadly. Internet provides great convenience for people's life, but also brings a lot of unexpected problems. Computer security is an outstanding problem. Traditional network security technologies have some defensive roles such as identification and authentication mechanism of firewall, but these technology have not an active defense but a passive defense, In view of that,a new network intrusion detection technology achieved active defense of network has become an important research topic .Immune system protects the body against viruses, bacteria and other violations, and network intrusion detection systems protect a working computer from the external invasion. They both maintain the stability of systems in the changing environment. Immune system shows good features in the information processing such as distributed protection, diversity, adaptability, robustness, memory capacity, fault tolerance, dynamic stability, and it is currently expected in the field of intrusion detection .When traditional method does not resolve the problem of network security, the research of biological immune principle used in intrusion detection technology has attracted computer security researchers. They believe that theories can help the immune system overcome the problem of Intrusion DetectionNow the research of intrusion detection technology based immune theory has become a hotspot. The research is to solve network intrusion detection problem by using immune principles, architecture and algorithms extracted from immune system. So a new kind of intrusion detection technology based on immunological theory is introduced to improve the detection and analysis abilities of the system .This paper introduces the research of intrusion detection system and analyses the operating principle and mechanism of biological immune system such as body identification, affinity mutation, immune memory and immune tolerance. It describes the law of redundancy and each match of the detection of negative selection algorithm in the r-contiguous match rule, as well as the application process of clone selection algorithm in the immune systemFinally, a dynamic intrusion detection mode based on immune theory is proposed. It is used to make up for deficiencies of network intrusion detection. It is closer to the working mechanism of body immune system and uses the style of anomaly detection and feature detection. It introduces clone selection algorithm, intrusion response mechanism, and increases the cloning of premature collection. Then new memory detector replacement algorithm is used in the model. Model improves the efficiency of network intrusion detection system with a higher detection rate and low false negative rate by experiment.