基于免疫机制的蠕虫检测防御系统

Worm Detection and Prevention System Based on Immunity

当今的蠕虫检测防御系统都是被动的检测防御系统,只能进行事后处理,不能检测和防御未知蠕虫。生物免疫系统是一个高度复杂的分布协调自适应系统。由于蠕虫具有生物病毒特征,所以作者借鉴生物免疫系统来构建一个基于免疫机制的蠕虫检测防御系统,该系统将被动检测蠕虫和主动检测蠕虫相结合,既可以检测清除已知的蠕虫,又可以自适应地检测阻断部分未知蠕虫,即使未阻断它,也可以触发相应的响应机制,和其它防御系统互动,共同构成有效的检测、防御、预警和防范系统。

The current worm detection and prevention system is a passive one in which unknown worms can＇t be detected and prevented. Biotic immune system is a highly complex system of distribution and self-adaptation. Worms are characterized by biotic viruses, so we can set up a worm detection and prevention system based on immunity via the biological immune system. This worm detection and prevention system combines passive and active worm-detecting; namely, it can detect and eliminate known worms, and can simultaneously detect and sever part of the unknown worms self-adaptively. Even though severance fails, the corresponding responsive mechanism will be triggered to interact with other prevention systems, all working to constitute an effectively detective, preventive, pre-warning and guarding system.