• 中国计算机学会会刊
  • 中国科技核心期刊
  • 中文核心期刊

J4 ›› 2006, Vol. 28 ›› Issue (5): 70-72.

• 论文 • 上一篇    下一篇

动态克隆选择算法在入侵检测应用中的研究

宋健[1] 李峰[2]   

  • 出版日期:2006-05-01 发布日期:2010-05-20

  • Online:2006-05-01 Published:2010-05-20

摘要:

内嵌阴性选择算子的克隆选择算法(N-AIS)只能作为误用检测器,检测给定静态环境下的入侵行为,而不能自适应动态变化的网络环境.本文引入一种动态克隆选择算法DynamiCS对N-AIS进行扩展,并在人工生成的IDS环境中对影响DynamiCS性能的三个重要参数:耐受期、激活阈值和生命期进行了测试和分析.结果表明,它能够更好地处理和应用于入侵检测系统自身行为不断变化及每次仅提呈部分自身抗原的环境.

关键词: 人工免疫算法 入侵检测 动态克隆选择

Abstract:

N-AIS can he only used as a misuse detector to detect the given static antigen data set, hut cannot automatically adapt to the dynamic network intrusion. The paper introduces the dynamic elonal selection algorithm called DynamiCS in order to extend the N-AIS. The effects of three important system para meters of toleration period, activation threshold and life span are tested and analyzed on artificially created scenarios that reflect two common real c ircumstances of IDS. The abilities for DynamiCS to perform incremental learning on converged data and to adapt to novel data are demonstrated.

Key words: artificial immune algorithm, intrusion detection, dynamic clonal selection