Ids Model Based On Immune Principle

With the rapid development of computer and Internet, network security has become an important issue. Intrusion detection system (IDS) can detect the resource of the system and the network in real time, find intruder, and prevent the legal user's mistake operation to resources. Intrusion detection system has expanded concept of safe protection and remedied deficiency of traditional safe tactics. However, the existing intrusion detection has some limitations facing with the fast change of attack technology. immune system protect body from the harm from antigen and the intrusion detection system protect computer form intrusion, thus, it is more significant to put the methods and principles of biology immune into the fields of intrusion detection system.So a new kind of intrusion detection technology based on immunological theory is introduced to improve the detection and analysis abilities of the system. Firstly this paper introduces the research of Intrusion Detection System. Secondly this article analyses the usable characteristic of the technology of immune tactics in the intrusion detection technology and gives us research revelations. On this basis a new kind of intrusion detection system model is presented based on the immune tactics and the integral control algorithm of model is presented, this model utilizes mobile agent technology to gather network datum and respond the intrusion and makes use of the immune principle to optimize detection gene database. According to the network datum and immune clone selection algorithm, a rule antigen presentation method is proposed, on the base of the genetic immune algorithm, according to the network intrusion detection datum, this paper designs the immune tactics algorithm. Finally we compare our algorithm with the algorithm which applies negative selection algorithm of artificial immune system to intrusion detection in the dataset kddcup99. The experiment results have shown that our algorithm have higher detection rate.