Immune Principle And Applied Research In The Intrusion Detection System

This thesis based on the project "The key technique research of intelligentIntrusion Detection System (IDS)", try to find out new intelligent IntrusionDetection technique.First, this thesis introduced the basic principle of IDS, some existing systemstructure, the classification of IDS. Analyzed the existing intrusion detectiontechnique completely. Comparatively, introduced various intrusion and attack skill.Simply introduced some representative intrusion detection system.Subsequently, introduced the work mechanism, the work process of thebiological immune system completely, and some models and method of the artificialimmune system. This thesis applied the immune principle in IDS; expound a newkind of IDS structure lately. This system founded the immune principle applicationin multi-Agent-based IDS, put forward the concept of the immune Agent. The IDSbased on immune Agent had the characteristics of distribution, intelligence, Paralleland evolution. It can not only adapt to the complicated network environmentautomatically, but also enhance the ability of intrusion detection by self-study andself-evolution. It can make use of the network resources and intrusion detectionmission can be done well in conjunction with the system. The system structure is akind of admixture form structure: this structure makes use of the data of based onthe host and network at the same time, make the IDS be able to collect the moreoverall information; On the other hand, the structure used the anomaly detection andmisuse detection at the same time. Can detect the former and new intrusion.This thesis studied various immune algorithm, further studies the algorithm inand the basic structure of general algorithm, analyzed existing two algorithms. Andgive the application of immune algorithm in the intrusion detection process. Basedon the multi-immune-Agent IDS, designed the "antigen identification algorithm"which can detection intrusion, and the "generation antibody algorithm"which candeal with intrusion. The two algorithms both based on immune principle. Described...