入侵检测系统论文：基于免疫原理入侵检测系统与研究.docVIP

入侵检测系统论文：基于免疫原理的入侵检测系统的研究 【中文摘要】随着计算机网络被应用到社会的各个领域,人们对其的依赖程度不断地提高。攻击者的知识不断增加和多样自动化工具的日趋成熟使网络安全问题日益突出。传统的安全技术(身份认证技术、授权与访问控制、防火墙技术等)由于缺乏对层出不穷的攻击行为的主动性,已无法保证网络的安全。入侵检测系统应运而生,它通过分析从计算机网络中收集的若干关键点的信息,从中发现是否有被攻击的迹象存在于网络中,从而作出实时的安全响应。虽然入侵检测系统弥补了传统的安全技术的不足,但是也面临着各种各样的挑战。区分正常和有害行为的异常就是其面临的一个重要的挑战。生物免疫系统的主要功能是识别体内细胞,将其归类为“自我”和“非自我”,并引发适当的防卫机制去除“非自我”。受生物免疫系统的启示,人工免疫系统随之产生。由于人们对生物免疫机制的认识还不深,理论还不丰富,因此人工免疫系统的研究中仍存在着许多挑战,主要包括：①缺乏创造性思维,人工免疫系统的研究举步维艰；②理论基础研究匮乏；③应多与生物免疫学者、数学家交流,为免疫算法建立有用的数学模型。鉴于以上原因,本论文主要对以下几个方面做了研究：1.对生物免疫学当前的成果和进展进行了研究,包括免疫系统的组成和原理以及最新的理论免疫模型和学说。2.对人工免疫系统的一般框架和体系结构以及基于自适应免疫系统的主要算法进行了研究,并针对负选择算法的不足对其进行了改进。3.深入分析了免疫原理,提出了一个基于免疫原理入侵检测系统模型并在模型的检测器生成模块中通过仿真实验证明了本文设计的模型的有效性。图27表6参50 【英文摘要】As computer network has been widely applied in society, people’s dependence on network has been greatly increasing. Increasing knowledge of the attacker and the maturation of various automated tools make the network security issues become more and more concerned. Traditional security techniques such as authentication technology, authorization and access control, firewall technology, which lack of the initiatives to detect endless attacks, have been unable to ensure network security. Intrusion detection system came into being. IDS can positively analyze the information of computer networks for finding out the possible intrusion. If intrusion happened, IDS has some real-time security response.Although the disadvantages of traditional security technologies have been overcome, the intrusion detection system also faces various challenges. How to distinguish normal and abnormal behavior is the most important problem. The main function of biological immune system is to identify the body cells, to classify which is “self and “non-self, and to trigger the appropriate defense mechanism to remove “non-self”. Artificial Immune System is inspired by the biological immune system.As people抯 understanding of Biological Immune System is not deep enough, and the theory is not integrity, so there are sti