免疫防火墙模型的构造  

Research on the model of immune firewall

作　　者：毛新宇[1] 梁意文[2] 

机构地区：[1]武汉大学东湖分校,湖北武汉430072 [2]武汉大学计算机学院,湖北武汉430072

出　　处：《计算机工程与设计》2004年第8期1282-1285,共4页Computer Engineering and Design

摘　　要：为了改变传统防火墙静态的缺点,在计算机免疫学原理的指导下,通过借鉴自然免疫系统特征,提出了免疫防火墙模型。该模型是两层结构,第1层采用传统的防火墙技术,第2层是基于免疫原理的免疫层。免疫层采用规则树编码的识别器,通过在self、nonself集上进行学习和识别训练,获得self、nonself的主要特征,产生动态规则,即免疫层的免疫(淋巴)细胞,以自适应的方式阻拦非法数据,并利用演化计算对识别器进行演化。该防火墙模型具有一定的自适应性和动态性。A new model of firewall is presented according to computer immunology. The structure of this model includes two layers. The first layer is called traditional layer, the second layer is called immune layer. The traditional technology of firewall is used in the first layer. The second layer is based on the principle of computer immunology. The rule tree detector is used in the second layer, selfstudying, producing dynamic rule and solving the flaw of the first layer in self-adaptation way. The rule tree detector is evolved by GA and GE The new model of firewall has the characters of self-adaptation and dynamic.

关 键 词：防火墙技术 识别器 两层结构 自然免疫系统 计算机免疫学 免疫原理 演化计算 淋巴 改变 细胞 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术] TP311[自动化与计算机技术—计算机科学与技术]