一种基于免疫多代理的网络入侵检测模型

A NETWORK INTRUSION DETECTION MODEL ON IMMUNE MULTI-AGENT BASIS

将生物免疫机理引入到网络入侵检测技术中,构建了一个基于免疫Multi-Agent的网络入侵检测模型。该模型采用没有控制中心的并行ImA检测模式,在检测时,各ImA在网络的各个节点间流动,既相对独立又相互协作。该模型是一个开放的系统模型,具有较强的伸缩性,与其它网络入侵检测模型相比,增强了可适应性、健壮性、自治性和可扩展性等。

A network intrusion detection model was built on Immune Multi-Agent （IMA）basis with the biologic immunity mechanism im- ported to the detecting technology. The concurrent ImA detection mode without control centre was applied to the model to enable each ImA roaming among the nodes in network independently while in mutual collaboration when making the detection. As an open system the proposed model is more retractile than other models as well as having the increased adaptability, robustness, autonomy and scalability.