基于免疫赦免的入侵检测方法研究

Research to Intrusion Detection way Based on Immune Privilege

针对现有网络安全技术的缺陷,将生命医学中的免疫赦免原理引入到入侵检测领域,提出了入侵免疫赦免的概念,给出了入侵免疫赦免系统模型及其各个功能模块的形式化定义,并说明了构建该模型时所需要的技术与机制.重点研究了入侵免疫赦免系统的赦免机制及原理,并给出了一个与免疫机制协同工作的入侵赦免触发器(赦免植入Agent,IPAT).

In view of the flaw existed in network security technology, introduced the principle of immune privilege in the domain of life-and-medicine to the intrusion detection, put forward the concept of intrusion immune privilege, proposed the model of intrusion immune privilege system and the formalized definition to each function module, and explained the technology and mechanism needed in the constructing to this model. Studied the intrusion immune privilege system with emphasis on the mechanism and principle, and posed one intrusion immune trigger （ATP） co-operated with the immunity mechanism.