Ip Network Security Model Based On Biological Immune Principle And Its Implementation Method

With the rapid development of Internet, the safty and security of network is increasingly outstanding. And, along with the expansion of network scale, the whole network presents some new features, such as unbounded and scale-free, which makes the traditional network security technologies based on centralized control cannot satisfy the security requirement. Natural immune system has many excellent characteristices desired by network security, such as self-organization, self-adaption, and parallel distributed peocessing. Introducing the natural immune machenism into network security is the frontier filed of network security. In this theme, inspirated by natural immune system, a Network Immune System (NIS) is built to meet the demand of network security by imminating the natural immune system.Firstly, the background, source and significance of this work are introduced. This theme is supported by Natural Basic Research Project of China (2007CB310706).Secondly, biological principle of NIS is discussed in this theme. The strcuture, function, working principle and working mechanism of natural immune system are analyzed. And, the Artificial Immune System (AIS) are introduced, including its related definations, characteristics, research method, research contents and the state of the art. This part prepares the theoretical analysis for the building of NIS.Thirdly, based on the natural immune system, a network immune system model is proposed, and the related defications, system compositons and structural framework of NIS are investigated. The functions of each system compositons are also studied and the cooperation mechnisam among the compositions of NIS are discussed. A set of key designs, including models and algorithms for antibody detector generating and matching, are designed and evaluated.Finally, we introduce the new features of scale-free and unbounded of Internet. An improving BA model was proposed. Borrowing the methods from epidemiology a network antibody and antigen spreading analysis model is built. Based on the improving BA model, a simulation platform is programmed. Combining with spreading analysis model and system simulation, some factors that affects network security are studied, and some countermeasures in inproving network security are proposed.The main contribution and innovation of this article include the following. Based on the unbound and scale-free charactistics of Internet, a Network Immune System is buile simulating the natural immune system. A network antibody and antigen spreading analysis model is built borrowing the methods from epidemiology and the improved negative selection algorithm are introuced. And a simulation platform is programmed base on an improved BA model proposed in the theme. This theme analynized the factors that affects network security and coutnermeasures are discussed.