基于免疫危险理论的新型网络入侵检测方法研究  

The Research of Network Intrusion Detection Based on Immune Danger Theory

作　　者：许春[1] 李涛[1] 刘孙俊[1] 赵辉[1] 张建华[1] 刘念[1] 

机构地区：[1]四川大学计算机学院,四川成都610064

出　　处：《南京邮电大学学报（自然科学版）》2006年第5期80-85,共6页Journal of Nanjing University of Posts and Telecommunications：Natural Science Edition

基　　金：国家自然科学基金(60373110;60573130;60502011);教育部博士点基金(20030610003);教育部"新世纪优秀人才支持计划"(NCET-04-0870)资助项目

摘　　要：该文提出了一种基于免疫危险理论(Immune Danger Theory,IDT)的新型网络入侵检测方法.该方法给出了抗原凋亡和坏死过程的定义,定量计算危险信号,并以此检测网络攻击.仿真实验表明该方法不仅保持传统AIS自学习、自适应、多样性等优点,而且能降低免疫学习时间和错误肯定率,是一种网络入侵检测的好方法.A new method of intrusion detection based on the immune danger theory is presented. The danger signal of antigen apoptosis and necrosis are defined. Meanwhile, the method of how to calculate the danger signal and detect network intrusions are also introduced. The experiment of results show that the method can not only keep the advantages of self-learning, self-adaptation and diversity of the tradition AIS, but also decrease the rate of false positive and the immune study time during the detect process, therefore it is an effective method for intrusion detection.

关 键 词：免疫危险理论 危险信号 人工免疫 入侵检测系统 错误肯定率 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]