应用层异常检测模型

The Model of Application Level Anomaly Detetion

目前的应用层异常检测方法多是针对某一种应用层攻击而设计的,通用性较差。本文基于人体免疫系统T细胞识别自体和非自体的原理,设计了基于否定选择的应用层异常检测通用模型,研究了实现否定选择应用层的关键技术。仿真实验表明,该模型能够有效地检测网络服务器的应用层的异常访问,具有广泛的应用前景和推广价值。

The current technique of application level anomaly detection has a bad universal property which is for one type of application level attack.Inspired from the principle of immune cell identifying nonself,a generic model of application level anomaly detection based on negative selection is designed,and the key technologies of implementation are studied.Simulation tests show that the model can detect the application level anomaly of network servers,and has the advantages of good performance,and broad application prospect.