Intrusion Detection System Model Based On Artificial Immune

With the rapid extension of Internet and wide application of Internet, network security, especially network intrusion, has become ever serious. Therefore, it is quite necessary for us to thoroughly analyze problems in network security, such as intrusion attack, to study intrusion detection technology, and also to develop effective intrusion detection systems (IDS). And the research about IDS is valuable and important for the development and application of network information systems.The problem faced in computer system is similar with the biological immune system: the biological immune system protects body from the harmful antigen and the computer security system protects computer form intrusion. So, from the inspiration of the biological immune system, researchers recently proceed from biological prototype, abstract to corresponding imitative life mechanism, form a new field------Artificial Immune System (AIS).Through the study of current intrusion detection systems and biological immune system, an artificial immune-based intrusion detection system model is discussed and analyzed in full detail from the view of adaptability, flexible and efficiency. Thus the model indicates ways in which we can improve our existing intrusion detection systems. That is applying biological principles extracted from IS to the design and implement of intrusion detection systems.First, this thesis introduced the basic principle of IDS, some existing system structure, the classification of IDS, analyzed the existing intrusion detection technique completely, and than concluded their drawbacks.Second, we researched basic theories of immunology, through it we could refine principles and characteristics of immunology, we also introduced the basic concept of AIS, the immune algorithms, the regulations of matching and some applications of AIS on IDS.Further more, we proposed an artificial immune-based intrusion detection system model, gave out the quantitive descriptions of the theory, and designed the model systemically. We also presented the solutions of memory module, mature module and immature module and the detection algorithm. And than we discussed the HOLE problem and its solution, and simply analyzed the characters of the model. Through simulating the artificial immune-based intrusion detection system, we confirm that this model has good and advanced practicability.Finally, we expected the researches of the artificial immune-based intrusion detection, and proposed the feasible work direction in the future.On the basis of learning and researching the formers' studies, the author of this paper proposed the artificial immunity-based intrusion detection system model which is designed to be adaptable, flexible, extendible, and that can perform real-time monitoring in accordance with the needs and preference of network administrators and hope that it can solve the problems existed in traditional...