Immune Theory Based Network Intrusion Detector Generation Algorithm

With the rapid development of network and the improvement of the informationsystem, network brings us not only the numerous economic interests and society interests,but also a more severe problem of security. As an active defensive technology, intrusiondetection technology is the second safe strobe besides firewall and can inspect thenetwork without reducing its performance. By comparing the intrusion detection system(IDS) with the immune system, we can see that they are Similar with each other and thenetwork intrusion detection system (NIDS) will benefit from the immune theory. It isantibody that detects abnormity in the immune system. Hence, the key to establish theNIDS based on immune theory is to simulate the update of gene lib (GAllib) and negativeselection to create the detectors. In this paper, we focus on the creation of networkintrusion detector based on immune theory. First, after introducing the basic concept ofnetwork security, the NIDSs based on immune theory are briefly introduced. Afteranalysis of the advantages and disadvantages of the IDSs, the NIDS based on immunetheory is introduced. Second, a more efficient algorithm is proposed on the basis of thecurrent algorithms on creating detector. Last, the improved algorithm is applied to thenetwork intrusion detection model. By meaning of acquired data from the network andthe evaluation data about the intrusion detection from DARPA in 1999, the performanceof two kinds of algorithms are compared. In conclusion, the result shows that the systemwith improved algorithm is superior in the detection of the attacks, and the rate of falsealarm of the system with improved algorithm is reduced.