利用确定性树突状细胞算法在线检测僵尸网络  

Deterministic Dendritic Cell Algorithm for Online Detection of Botnet

作　　者：董刚 滕云 姜鑫阳 郭东[1] 李强[1] 

机构地区：[1]吉林大学计算机科学与技术学院,符号计算与知识工程教育部重点实验室,长春130012

出　　处：《吉林大学学报（理学版）》2017年第6期1485-1490,共6页Journal of Jilin University:Science Edition

基　　金：国家自然科学基金(批准号:61170265;61472162)

摘　　要：将人工免疫系统算法应用于对僵尸网络的实时监测,提出一种基于确定性树突状细胞算法的在线检测模型.通过结合僵尸网络的特征定义行为信号,基于启发信息实现僵尸网络的主机端实时监测.使用标准数据集对模型的有效性进行实验验证,实验结果表明,该模型具有实时性、行为定义简单、可接受多种启发式信息定义的优势,且检测僵尸网络系统的漏报率与误报率均较低.We applied artificial immune system algorithm to the real-time detection of botnet,and proposed an online detection model based on deterministic dendritic cell algorithm.Combining the characteristics of botnets,the behavior signals were defined,and the real-time detection of the host of botnet based on the heuristic information was realized.The validity of the model was experimentally verified by using standard data sets.Experimental results show that this model has the advantages of real-time,simple behavior definition and accepting the definition of multiple kinds of heuristic information.Moreover,the false negative rate and false positive rate of detection of botnet are low.

关 键 词：人工免疫系统 树突细胞算法 危险理论 僵尸网络检测 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]