基于人工免疫的网络入侵检测中疫苗算子的作用研究  

Investigating the Role of Vaccine Operator in Artificial Immune System for Network Intrusion Detection

作　　者：方贤进[1,2] 李龙澍[3] 钱海[4] 

机构地区：[1]安徽理工大学计算机科学与工程学院,淮南232001 [2]安徽大学智能计算与信号处理教育部重点实验室,合肥230039 [3]安徽大学计算机科学与技术学院,合肥230039 [4]中国科学技术大学计算机科学与技术系,合肥230039

出　　处：《计算机科学》2010年第1期239-242,270,共5页Computer Science

基　　金：安徽省科技攻关计划重大科技专项项目(08010201002);安徽省高等学校自然科学基(kj2007B242)资助

摘　　要：在以前研究工作的基础上,将包含疫苗算子、变异算子和其它算子的免疫算法与人工免疫中的负选择算法结合在一起,实现检测器种群的进化,目的是加快种群的亲和力成熟进程和提高网络入侵检测效率。详细地给出了疫苗自适应提取算法和疫苗算子算法,建立了基于免疫算法和负选择算法的模型及算法来实现网络入侵检测。分别设计了基于克隆选择算法的和基于免疫算法的网络入侵检测实验。实验结果表明,含有免疫算子的免疫算法加快了检测器种群亲和力成熟的进程,收敛速度更快,随着进化代数的增加检测率总体呈上升趋势。而基于克隆选择算法的网络入侵检测则出现了检测器种群亲和力成熟进程较慢,并随着进化代数的增加检测率呈现轻微退化和较长时间停滞不前的现象。On the basis of author＇s previous research works, this paper integrates Immune Algorithm （IA） consisting of vaccine operator,mutation operator and other operators with Negative Selection Algorithm （NSA）, called IA-NSA algorithm, to perform evolution of detector population, whose purposes are to quicken the process of affinity maturation and improve the efficiency of network intrusion detection. The algorithms of vaccine operator and adaptive extracting vaccines were given in detail. A novel network intrusion detection model and its algorithm based on IA-NSA were presented to establish anomaly detection. The network intrusion detection experiments based on IA-NSA algorithm and Clonal Selection Algorithm （CSA） were designed respectively, the experimental results show that the IA-NSA algorithm consisting of vaccine operator quickens the affinity maturation process of detector population and stably increases the detection rate along with increasing evolutionary generation. But in CSA-NSA algorithm, the affinity maturation process of detector population takes more time,the detection rate has a little degradation and maintains invariant for a long time.

关 键 词：免疫算法 疫苗算子 克隆选择算法 网络入侵检测 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]