Improved artificial immune intrusion detection model
Liu Jiu-jun · Journal of Computer Applications · 2012
An improved artificial immune intrusion detection model was proposed based on ARTIS(ARTificial Immune System)-a distributed intrusion detection model proposed by Hofmeyr.It aimed to overcome defects of the existing artificial immune Intrusion Detection Systems(IDS).To improve the quality and reduce the scale of memory and mature detectors,the improved model used the protocol analysis technology to make co-stimulation of the immune module.The protocols were taken into account while generating and organizing detectors,so the inefficiency of traditional AIS can be overcomed.Weight based r-continuous matching rules were taken to improve matching accuracy of the antibody-antigen reactions.Meanwhile,the co-stimulation module can automatically generate dynamic filter rules for firewall when flood attack occurs.Finally,the authors had a simulation test and comparative analysis on improved model and ARTIS model by using DARPA data sets owned by MIT Lincoln laboratory and the results evaluate the feasibility and effectiveness of the improved model.