Design of an Immune based Network Intrusion Detection System

摘要

With the rapid development of network application, network intrusion detection system becomes one of the hot spots and has been considered as a new methodology to network security problem. Especially, immune based intrusion detection techniques can incorporate the advantages of both anomaly intrusion detection and misuse intrusion detection and may protect a system and network more effectively. In this paper, the architecture of an immune based network intrusion detection system is introduced, which is a distributed system by using a single intrusion detector in a local host for detecting local intrusions, performing local analysis and sending its local analysis results up to central server for global network analysis and decision making. Furthermore, the main components of this network intrusion detection system are described in detail. Finally, in a local area network environment, an elementary online experiment is carded out.