面向存储安全系统的新型人工免疫算法

New Artificial Immune Algorithm for Storage Security

提出了新型人工免疫算法,用于研究高效的存储安全系统。首先给出了基于免疫存储安全系统的结构和相关定义。在分析人工免疫算法中已有匹配规则的基础上,为提高安全系统的效率,提出了任意r连续位匹配规则,提高检测器识别非自体的能力,减少存储安全系统识别非自体所需的成熟检测器数量;为了使存储安全系统能适应不同的自体集,自动优化检测效率和准确性,避免检测存储安全系统的失效,本文提出了自适应匹配阈值机制。分析了使用不同匹配规则时检测器能识别的最大非法访问请求数量,以及对不同自体集采用静态匹配阈值和自适应匹配阈值机制时存储安全系统的检测效率和准确性。使用新型人工免疫算法实现安全原型系统,验证了算法的性能。最后通过修改开源存储区域网系统Lustre中智能磁盘部分的源代码,实现了基于免疫安全磁盘的原型系统,测试增加存储安全系统前后Lustre系统的I/O性能,结果表明新型人工免疫算法能高效地保护存储系统的安全。

On the basis of analyzing demand of storage security system and current artificial immune algorithm, this paper presents new artificial immune algorithm to ensure security of storage system efficiently. Main current matching rules are introduced to analyze the efficiency of current artificial immune algorithm. Firstly the structure of storage se- curity system and the definition of main elements in it are given. To improve the efficiency of artificial immune algo- rithrn, this paper proposes random r-continuous matching rule to improve the number of non-self that one detector can recognize. To avoid failure of storage secure system that no detector are self-tolerance and low efficiency of inspecting, this paper presents self-adaptable threshold selection algorithm to select suitable threshold for different detectors, and then balance between efficiency and accuracy for different self sets. Analyzing how much non-self one detector can recognize and whether the selection of threshold is adaptability. Using new artificial immune algorithm to implement the prototype of secure system and verify its performance. We implement prototype of new artificial immune algorithm. The evaluating result shows the new artificial immune algorithm has higher efficiency and is more adaptability than current artificial immune algorithm. At last, we modify the source code of storage area network system named Lustre and implement prototype of the secure disk system. By evaluating its I/O performance, the result shows new artificial immune algorithm can ensure the security of storage efficiently.