基于生物免疫机理的分布式agent入侵检测系统模型  

Distributed agent intrusion detection system model based on immunology mechanism

作　　者：马占飞[1] 郑雪峰[1] 

机构地区：[1]北京科技大学信息工程学院

出　　处：《计算机应用研究》2008年第3期895-898,共4页Application Research of Computers

基　　金：国家“十五”重大科技攻关资助项目(2004BA616A-11-03)

摘　　要：在剖析生物免疫机理的基础上并受其启示,提出了一种基于生物免疫机理的分布式agent入侵检测系统的新模型。该模型系统通过多层次分布式代理的相互协作实现主机/网络的实时入侵检测,其具有多样性、分布性、自适应性、容错性、动态性和可扩展性等特性。在整个设计过程中,充分考虑了最适合生物免疫特性的算法和模型,将agent机制作为一个通信和监测的手段,尽量少地占用系统的开销,提高了系统的效率,保证了较高的安全水平。同时也给网络安全领域提出了一种新的研究思路。Drawing the inspiration from biology immune mechanism, a novel distributed agent intrusion detection system （DAIDS） model was given based on its principle and architecture to improve the capability of detection of current network intrusion detection systems. The real-time detection of the host ＆ network was realized by the multi-agents collaboration of this model, which had such characteristics as diversity, distributed, self-adaptability, tolerance, dynamic and expansibility, and so on. In the design process, the better algorithm and model based on biological immunity characteristic was discussed. The agent mechanism was considered as a method of communication and monitor, as far as possible few takes the system resource, enhanced the system efficiency, and guaranteed the higher security level. At the same time, a novel intrusion detection opinion was proposed in the network security fields.

关 键 词：入侵检测 生物免疫 免疫机理 信息安全 代理 分布式 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]