危险区域及其在入侵检测系统中的应用研究  

Research of Danger Zone in Network Intrusion Detection System

作　　者：许春[1] 伍良富[2] 陈兴蜀[1] 游洪跃[2] 刘学洪[1] 

机构地区：[1]四川大学信息管理中心,四川成都610065 [2]四川大学计算机学院,四川成都610065

出　　处：《四川大学学报（工程科学版）》2011年第3期109-112,共4页Journal of Sichuan University (Engineering Science Edition)

基　　金：国家自然科学基金资助项目(60373110);国家重点基础研究发展计划资助项目(2007CB311106)

摘　　要：基于免疫危险理论,针对网络入侵检测应用,提出了一种危险区域的产生机制,给出了危险区域半径的计算方法,设计了抗原直接坏死危险信号signal_0和抗原检测危险信号signal_1的计算公式,并根据危险信号signal_0和signal_1提出了危险区域内抗原检测算法。实验表明,选取适当的危险区域半径,有助于提高入侵检测系统的检测效率,使漏检率和误检率都保持较低水平。Based on immune danger theory,a danger zone generating mechanism,a danger zone radius calculation method and the calculating formula of the danger signals signal_0 by antigen necrosis and the antigen detected danger signals signal_1 were given according to the intrusion detection application.In addition,a detection algorithm in the danger zone was presented according to the signal_0 and signal_1.The experiments showed that the proper selection of the dangerous area radius is helpful for the improvement of the efficiency of intrusion detection system,and make both the false negative rate and false detection rates remained at a lower level.

关 键 词：危险理论 危险区域 血亲类 网络入侵检测 

分 类 号：TP393.081[自动化与计算机技术—计算机应用技术]