基于可信根的计算机终端免疫模型

Trusted Root Based Computer Terminal Immune Model

人工免疫系统方法中的否定选择(NS)算法已广泛应用于病毒防护、入侵检测、垃圾邮件检测等.然而,由于当前的计算机中不存在类似"免疫器官"的硬件部件,无法对NS算法的运行提供保护,可能造成其运行过程遭受恶意干扰,成熟检测器和中间变量遭受篡改,进而导致其检测结果不可信.借鉴自然免疫系统的组成和原理,提出一种基于可信根的计算机终端免疫模型(TRBCTIM),引入可信计算技术中的可信根作为"免疫器官",对NS算法实施保护.采用无干扰可信模型理论对新模型进行分析,并通过构建新模型的原型系统来进行性能实验.理论分析及实验结果表明,新模型能够确保NS算法的运行过程和检测结果可信.

Negative selection（ NS） algorithm,a kind of artificial immune system method,is w idely applied in virus detection,intrusion detection,spam detection,etc. How ever,for there is no hardw are component like＂immune organ＂in current computer systems,NS algorithm runs in an unprotected environment,w ith its running process interfered,mature detectors and intermediate variables interpolated,and then detection results trustless. The composition and principle of natural immune system are simulated and then a trusted root based computer terminal immune model（ TRBCTIM） is proposed,w hich introduces trusted root as＂immune organ＂from trusted computing technology to protect NS algorithm. Theory of non-interference trusted model is used to analyze the proposed model and the prototype system is constructed to test its performance.Theoretical analysis and experimental results show that the running processes and results of NS algorithm are trusted in the model.