生物免疫机理在网络入侵检测中的应用

Application of Biology Immunological mechanism in Network-based IDS

基于生物免疫学的网络入侵检测是近年来入侵检测领域研究的热点,它的突出特点是利用生物物免疫学的原理、规则与机制来实现对入侵行为的检测和反应。网络入侵检测系统与生物免疫系统具有本质的相似性:生物免疫系统负责识别生物体的"自我"(Self)与"非自我"(Non-self)细胞,并清除异常细胞;网络入侵检测系统则辨别正常与异常行为模式,采取适当的措施阻止对系统的入侵行为。文中围绕生物免疫系统的算法、原理和运行机制在网络入侵检测中的应用并结合入侵检测系统自身的特点进行了深入研究。

Recently, biology immunology-based network intrusion detection has been become a focus in intrusion detection system (IDS). Its merits are to detect and respond intrusion by virtue of theory, rule and mechanism of biology immunology. There are essential comparability between IDS and biology immune system. Biology immune system can distinguish self from non-self cell, and clear away abnormal cell; IDS can identify normal and abnormal model, and take some actions to protect system from intrusion action. Some exploratory researches have been made on IDS, and applied the algorithm, theory and mechanism of biology immune system and characteristic of intrusion detection.