基于免疫Multi-Agent的网络入侵检测模型

本文将生物免疫机理引入到网络入侵检测技术中,构建了一个基于免疫Multi-Agent的网络入侵检测模型.该模型是一个开放的系统模型,具有很好的可扩充性,易于加入新的检测元和免疫代理(Immune Agent,ImA).它采用没有控制中心的并行ImA检测模式,各ImA在网络的各个节点间流动,且各自独立,相互协作,合作完成检测任务.该模型与其他网络入侵检测模型相比,增加了可适应性、健壮性、自治性、可扩展性等特点.

A Network Intrusion Detection Model based on Immune Multi-Agent

This paper focuses on investigating immunological principles in designing a network intrusion detection model based on immune multi-agent, which is an open system model which has good scalability. It is easy to add new detectors and immune agents (ImAs). ImAs work in a concurrent way without any control center and roam around the machines (nodes or routers). ImAs are independent but are capable of com- municating with each other when they take their actions. The proposed model is designed to be adaptable, robust, autonomous, scalable that can perform real-time monitoring in accordance with the needs and preferences of network administrators.