Artificial Immune Model-based Intrusion Detection Technology Research

An intrusion detection system (IDS) is an automated system for the detection of computer system intrusions. The main goal of an IDS is to detect unauthorized use,misuse and abuse of computer systems by both system insiders and external intruders. According to the work of former researchers,this paper designs an artificial immune model for intrusion detection,which is inspired by a human immune system and based on agent technique. The intrusion detection system based on artificial immune model simulates negative selection,clonal selection,and memory cells in the human immune system and assigns detection to six kinds of functional agents,which are monitoring agents,decision agents,response agents,communication agents,selection agents and testing agents. Though sharing information and interaction with each other,these agents can identify anomalous behavior mode. The intrusion detection system employs negative selection algorithm to create detectors,optimizes them continuously and maintains efficient memory detectors. So it takes the advantages of anomaly detection and misuse detection,overcomes the natural shortcoming of them and can identify known intrusion and novel intrusion in computer systems.