生物免疫原理在网络入侵检测中的应用  

Application of Biologic Immune Theory in Network-based IDS

作　　者：任相花[1] 王培东[1] 杨向东[1] 

机构地区：[1]哈尔滨理工大学计算机与控制学院,黑龙江哈尔滨150080

出　　处：《哈尔滨理工大学学报》2005年第2期15-18,共4页Journal of Harbin University of Science and Technology

摘　　要：针对目前入侵检测系统存在的问题,根据生物免疫原理,提出基于生物免疫原理的分布式网络入侵检测模型,对该模型中关键部分检测器的建立和检测规则进行重点研究.该模型通过现有检测规则对入侵行为的检测,抗体基因库不断自动进化,新的检测规则不断自动产生,从而提高了入侵检测系统对未知入侵的识别能力和系统的自适应性,提高了入侵检测效率.Aming at the problem of intrusion detetion system, according to theory of the biologic immune system, the authors propose a distributed network intrusion detection model based on biologic immune theory. and chiefly study how to establish antibody gene bank and rule of detection. By detection,the model not only can make gene bank auto-evolute constantly but also can produce new rule of detection constantly. so the model improves ability that intrusion detection system detects unknown inbreak adaptability of system, raising the efficiency of intrusion detection system.

关 键 词：入侵检测 免疫系统 检测器 抗体基因库 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]