基于免疫原理的入侵检测中的漏洞研究

Research on Leaks in Intrusion Detection Based on Immunological Principles

负选择算法和k连续位匹配规则的局限性导致入侵检测系统存在"漏洞"。针对上述问题,分析"漏洞"存在的原因,设计一个用于确定一个随机模式是否是"漏洞"的算法,为降低系统的漏报率和完善系统的功能提供了一个有价值的解决方案。

As a result of the disadvantages in the negative selection algorithm and k_continuous_bit mathching regulation, there are detection leaks in intrusion detection system based on immunological principles. The causation of detection leaks are analyzed, and an algorithm is designed to make sure whether a random pattern is a leak. This algorithm provides a valuable scheme to reduce the probability of fail to report intrusion and perfect the function of intrusion detection system.