Research Of Intrusion Detection Technology Based On Negative Selection

With the prevalence of computer network, network security has been taken more serious. Intrusion Detection is an essential component of information security infrastructure protection mechanism,which guarantees the security of the network. The main goal of intrusion detection is to detect unauthorized use, misuse and abuse of computer systems by both system insiders and external intruders. While intrusion detection is a similar problem to the natural immune system. In recent years, intrusion detection technology based on immune has become a popular research area in intrusion detection system. Its prominent characteristic is to detect intrusion by immune logical theories, architecture and algorithms.The main shortcomings of current Intrusion Detection System include poor scalability, poor adaptability, incapablity of detecting unknown new types of attacks etc. Aiming at these deficiencies, this paper proposes a new prototype of IDS from the negative selection algorithm in immune system. In the new model, the negative selection algorithm is improved by a thorough investigating. There is a problem that the detectors are matched themselves in the generation of the detectors. The improvement aims at generating a set of detectors not matched each other and increasing the coverage of the detectors. A procedure is added, that is, to eliminate the issue that detectors matched themselves is tested, the new algorithm is feasible in this paper. The paper analyses the principles of carrying out every model and tests their function by experiments. The experimental result demonstrates that the rate of detection is improved at almost same rate of the false alarm.At the end, this paper summarizes all the research work mentioned above...