基于免疫原理多代理网格入侵检测系统体系结构研究.docVIP

基于免疫原理多代理网格入侵检测系统体系结构研究 　　 (1.曲阜师范大学 计算机科学学院， 山东 日照 276826； 2.四川大学 计算机学院， 成都 610065) 　　?? 　　摘 要： 　　为设计具有高检测率和低误报率的网格实时入侵检测系统，借鉴人类免疫系统与网格安全系统的相似性特征，在建立体系结构设计原则的基础上，确立了群体agent实现网格入侵检测系统的交互决策机制；在选定免疫模型与免疫算法的基础上，给出了人类免疫系统与网格入侵检测系统组件间的具体映射关系，从而实现了概念的逻辑移植；在建立agent网格体系结构基础上，设计了网格入侵检测系统的具体模块框架，详细阐释了与模块对应的具体agent结构与功能，从而完成了逻辑实体的物理移植。体系结构的建立为设计功能完善的网格入侵检测系统提供了一种可行的逻辑方案。 　　?す丶?词：代理； 体系结构； 网格； 免疫； 入侵检测系统 　　?ぶ型挤掷嗪牛?TP393 文献标志码：A 　　 文章编号：1001-?B3695(2009)02-?B0705-?B04 　　?? 　　Research on architecture of grid intrusion detection system?? based on immunity and multi-agents 　　?? 　　NI Jian-cheng1,2，LI Zhi-shu2, CHEN Li2, YE Jun2 　　??(1.School of ComputerScience,Qufu Normal University, Rizhao Shandong 276826, China; 2. School of Computer Science, Sichuan University, Chengdu 610065, China) 　　?? 　　Abstract:In order to design real-time intrusion detection system for grid environment having high true positive rate and low false positive rate, interactive decision-making mechanisminspired from similar characteristics containing between human immune system and grid security system, was confirmed for grid intrusion detection system implemented with colony agents, which were guided by several established designprinciples of system architecture. Thereafter, on the basis of the selected immune model and immune algorithms, logicaltransplantof concepts was solved in describing the concrete mapping relationship between components of human immune system and grid intrusion detection system. Physical transplant of logical entities, and then, was fulfilledby introducing agent grid architecture, designing modular framework of system, and explaining the structure and function of corresponding agents in correlative module. Therefore, a feasible logical scheme was prorvided to construct practical grid intrusion detection system by establishing the detailed system architecture. 　　??Key words：agent; architecture; grid; immunity; intrusion detection system 　　?オ? 　　网格[1]是一个由多用户、多信任组织组成的复杂系统，