基于克隆选择原理的网络安全监测研究

Research on Network Security Surveillance Based on Clonal Selection Principle

为了有效监测计算机网络面临的安全威胁,借鉴计算机免疫学中的克隆选择原理,研究一种动态的网络安全监测方法,模拟真实计算机网络环境下的抗原、自体和检测器等克隆选择原理中的关键要素,用数学方法描述检测器的动态演化过程,建立网络安全威胁监测的基本方法,实现了网络安全威胁的告警、网络安全风险评估和网络安全威胁的取证等网络安全监测流程。

In order to survey the security threats in the computer networks, a surveying method for network security based on clonal selection principle in computer immunology is proposed in this paper. Antigen, self-cell, detector, and etc in clonal selection principle are simulated in the real environment of computer networks. Dynamical evolution process of detector is described with math methods. Basic surveying method for network security threat is estab- lished. The flows of security threat alarm, security risk assessment and security threat forensics are realized.