基于海明距离的多重否定选择异常检测算法

A Multi-Level Negative Selection Algorithm of Abnormal Detection Based on Hamming Distance

基于免疫学的入侵检测技术是利用生物免疫系统的原理、规则和运行机制实现对入侵行为的检测。目前大多数入侵检测系统的核心算法采取简单的匹配技术,只能检测出已知攻击并且误报漏报率较高。本文在深入分析免疫算法基础上,提出一种基于海明距离多重否定选择算法的异常检测方法,该算法通过多次过滤生成检测器,在提高入侵检测效率的同时减少黑洞的产生。

Immune - based intrusion detection technology is based on the theory of biology Immune system. At present, most intrusion detection systems adopt the simple template match technique, which can only detect simple attacks, and have high misinformation. This paper analyses immune algorithm deeply, and put forwards a multi - level negative selection algorithm based on Hamming distance, which can improve detection efficiency and reduce black holes by using multi -filtering to generate detector.