基于人工免疫的新型入侵检测系统研究  

Research on a Novel Intrusion Detection System Based on Artificial Immune Theory

作　　者：黄均才[1] 王凤碧[2] 罗讯[3] 佘堃[3] 周明天[3] 

机构地区：[1]东莞理工学院计算机系,广东东莞523106 [2]东莞理工学院电子工程系,广东东莞523106 [3]电子科技大学计算机科学与工程学院,成都610054

出　　处：《电子科技大学学报》2006年第1期93-95,99,共4页Journal of University of Electronic Science and Technology of China

基　　金：电子产业发展基金资助项目(51415010101DZ02)

摘　　要：分析研究了人工免疫原理在网络入侵检测中应用的可行性,结合人工免疫模型和数据挖掘技术建立了一个网络入侵检测系统模型。对抗体生成过程中的关键算法进行了描述。为克服在抗体生成阶段由于采用遗传算子导致时空效率不佳的缺陷,将数据流分割成字符串集合,根据数理统计原理,讨论了分割参数和检测器数目的选定,使它在通用性、鲁棒性上具有优势。The feasibility of applying artificial immune theory in intrusion detection system is Analyzed, establishes a model combining artificial immune theory and data mining technique is estoblished. Based on the statistical theory, the amount of information that is lost by splitting a data stream into unordered strings can be estimated, and this estimate can be used to guide the choice of string length. Based on information-theory, a lower bound on the size of the detector set is derived. Detector Generating algorithm is described. The performance of Artificial Immune Intrusion Detection System （AIIDS） is better than the normal intrusion detection system based on knowledge engineering.

关 键 词：人工免疫理论 入侵检测系统 参数选定 抗体生成 

分 类 号：TP399[自动化与计算机技术—计算机应用技术]