基于免疫的入侵检测系统中检测子集分布策略

为了提高现有的入侵检测系统的鲁棒性及对未知入侵的检测能力,根据免疫的原理、体系结构,建立了一种新的基于免疫原理的分布式入侵检测系统模型.在该模型中,检测子集如何在各个分布式节点上合理的分配将在很大程度上影响系统的性能.在分析了影响检测子集分布空间因素的基础上,从理论上研究了分布策略的优劣,给出了一种可行的将具有部分重复检测空间的检测子尽量分配到不同检测节点的方法.实验结果表明,与单纯的顺序分配相比该策略能在部分检测节点失效时系统依然维持较高的检测率.

Distributing strategy of detectors in intrusion detection system from immunology

To improve the standard of robustness and the detection capability of existing intrusion detection,a new instruction detection model inspired is presented by the structures and the ideas of natural immune system.In the model,it affects capability of the system that how to distribute the detectors over the network.The distributed condition of the detectors is analyzed,the performance of the strategy is researched in the abstract and a realization strategies is given.The result of experiment prove that strate...