The current technique of application level anomaly detection has a bad universal property which is for one type of application level attack.Inspired from the principle of immune cell identifying nonself,a generic model of application level anomaly detection based on negative selection is designed,and the key technologies of implementation are studied.Simulation tests show that the model can detect the application level anomaly of network servers,and has the advantages of good performance,and broad application prospect.