基于改进否定选择算法的网络入侵检测模型  

Model of network intrusion detection based on mended negative selection arithmetic

作　　者：章登勇[1] 宫蓉蓉[2] 彭建[1] 

机构地区：[1]长沙理工大学计算机与通信工程学院,湖南长沙410076 [2]长沙民政职业技术学院软件学院,湖南长沙410004

出　　处：《计算机工程与设计》2009年第11期2663-2665,共3页Computer Engineering and Design

基　　金：湖南省教育厅科技基金项目(07C082)

摘　　要：为了解决网络入侵检测中如何迅速有效地检测出未知模式的入侵的问题,通过对人类免疫系统的基本原理的研究,提出了一种基于免疫原理的网络入侵检测新模型。该模型采用了改进的否定选择算法;根据否定选择理论,若与"自我"模式相匹配,则该模式不成为检测者,从而去掉它;否则,该模式成为一个检测者模式,并存入检测系统。实验结果表明,该模型可以准确地识别出未知入侵模式,有效地提高了系统的自适应性。In order to solve how to recognize the intrusion of unknown patterns rapidly and efficiently in network intrusion detection. Through researching on the basic principle of human immune system, a new model for network intrusion detection is proposed. Improved negative selection arithmetic is adopted in this model. According to theory of negative selection, if the pattern is matched with ＇self＇ pattern, it didn＇t become detector and is deleted. Otherwise, it became a detector pattern and is saved in detection system. The experimental results show that the unknown intrusion models are exactly identified by the model, the system＇ s self-adaptation ability is effectively improved.

关 键 词：免疫系统 入侵检测 网络安全 否定选择 未知模式 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]