基于免疫机理的入侵检测研究

Research on Intrusion Detection Technology Based on Immune Mechanism

入侵检测系统（简称“IDS”）是一种对网络传输进行即时监视，在发现可疑传输时发出警报或者采取主动反应措施的网络安全设备。它与其他网络安全设备的不同之处便在于，IDS是一种积极主动的安全防护技术。生物免疫系统是机体保护自身的一种防御性结构，入侵检测系统与生物免疫系统有着许多相似之处。本文在简要介绍免疫机理在入侵检测研究现状的基础上，着重探讨一种针对当前计算机及其网络运行的人工免疫系统（artificialimmunesystem，AIS）的理论模型．以及一种基于免疫机理的入侵检测系统的多子系统、多代理的体系结构。

The main objective of Intrusion Detection System （IDS） is testing computer systems internal or external intruders unauthorized use, misuse and abuse.IDS＇ unique role in the network security system so that it occupies an irreplaceable position.Biological immune system and intrusion detection systems have many similarities,the similarity of the immune system for intrusion detection system provides a study of natural template,In this paper,a brief introduction in the immune mechanism in intrusion detection research,based on a current focus on network computers and artificial immune systems （artificial immune system,AIS） of the theoretical model, as well as a mechanism of immune-based Intrusion Detection system of multi-subsystems,multi-agent architecture.