基于免疫Multi-Agent的网络入侵检测模型  

A Network Intrusion Detection Model based on Immune Multi-Agent

作　　者：翟宏群[1] 

机构地区：[1]江苏海事职业技术学院信息工程系,南京210096

出　　处：《现代计算机》2006年第4期38-41,70,共5页Modern Computer

基　　金：江苏省"网络与信息安全"重点实验室(BM2003201)的资助

摘　　要：本文将生物免疫机理引入到网络入侵检测技术中,构建了一个基于免疫Multi-Agent的网络入侵检测模型。该模型是一个开放的系统模型,具有很好的可扩充性,易于加入新的检测元和免疫代理(ImmuneAgent,ImA)。它采用没有控制中心的并行ImA检测模式,各ImA在网络的各个节点间流动,且各自独立,相互协作,合作完成检测任务。该模型与其他网络入侵检测模型相比,增加了可适应性、健壮性、自治性、可扩展性等特点。This paper focuses on investigating immunological principles in designing a network intrusion detection model based on immune multi-agent, which is an open system model which has good scalability. It is easy to add new detectors and immune agents （ImAs）. ImAs work in a concurrent way without any control center and roam around the machines （nodes or touters）. ImAs are independent but are capable of communicating with each other when they take their actions. The proposed model is designed to be adaptable, robust, autonomous, scalable that can perform real-time monitoring in accordance with the needs and preferences of network administrators.

关 键 词：免疫代理 检测元 免疫耐受 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术] TP18[自动化与计算机技术—计算机科学与技术]