基于人工免疫的分布式入侵检测模型  

Distributed intrusion detection model based on artificial immune

作　　者：程建[1] 张明清[1] 刘小虎[1] 范涛[1] 

机构地区：[1]信息工程大学密码工程学院,郑州450001

出　　处：《计算机应用》2014年第1期86-89,94,共5页journal of Computer Applications

摘　　要：针对现有分布式入侵检测系统交互流量大、单点失效及检测效率偏低的问题,基于人工免疫理论建立了一种新的分布式入侵检测模型,并提出了一种中心检测器配置及使用方法,并将异常检测与误用检测相结合。基于OMNeT++网络仿真平台设计了仿真模型,进行了仿真实验。仿真实验结果表明,改进模型交互流量明显减小,检测效率明显提高并有效解决了单点失效问题。仿真结果证明了改进模型的正确性与有效性。Concerning the problem of excessive interaction flow, single point failure and low detection efficiency in existing Distributed Intrusion Detection System （ DIDS）, a new distributed intrusion detection model based on artificial immune theory was proposed. The new distributed intrusion detection model presented a central detector configuration and method of use and combined misuse detection and anomaly detection. The simulation model was designed based on OMNeT ＋ ＋ network simulation platform and experiments were run. According to the simulation results, the model overcomes excessive interaction flow problem of the fully distributed system, solves the problem of single point failure and improves the detection efficiency effectively. The simulation results verify the validity and effectiveness of the improved model.

关 键 词：入侵检测 分布式 人工免疫系统 阴性选择 分布式拒绝服务攻击 

分 类 号：TP393.0[自动化与计算机技术—计算机应用技术]