Based On Biological Immune Intrusion Detection And Computer Security

This paper focuses on the principle of how immunology system identifies its own materials. The main job is to explore the similarity between the immunology system and the computer security system. According to the detection traits of the immunology system, we set up a detection method fits to the computer security. Through the investigations of the extensive research productions and documents, the development process and the mutuality of related important algorithms in this field are tided up and presented in this paper, and together with an immunology based intrusion detection modal, and its value in the intrusion detection field. In the process of analysing and building the detection modal, we put the distribution concept into the modal frame in order to give the system a good stability and extensibility. In order to implement the generality and crossing-platforms, the discussion about how to get the system calls sequences on the different platforms such as LINUX and WINDOWS is still made, and with comparison of their goods and bads. At the end of the paper, we implement the modal into the mainframe based detection system. The system can not only detect the new intrusion method, but also can rapidly detect the intrusions which are already known by the detection system. In the end, we discuss the feasibility of detecting the computer virus due to the method discussed above.