面向云计算平台的多层免疫入侵检测模型

摘要

In order to ensure the security of cloud computing environment, a multi-level intrusion detection model for cloud computing based on immune algorithm is proposed. In view of the cloud architecture, non-adaptive immune layer is deployed in the user terminal, and the detection of risk of intrusion behaviors is carried on based on the dendritic cell algorithm;adaptive immune layer and immune memory layer are deployed in the data center of a cloud computing. Using the improved dynamic clonal selection algorithm the known and unknown intrusion behaviors are identified and resisted. The experimental results show that the model can both resist the invasion behaviors and conduct real-time monitoring of the entire cloud computing environment, is an effective cloud computing security model.%为保障云计算环境下的信息安全，提出了一种面向云平台的多层免疫入侵检测模型。针对云环境的体系结构，借鉴生物免疫系统分层防御机理，在用户终端部署非特异性免疫层，采用树突状细胞算法进行入侵行为危险度检测；在数据中心部署特异性免疫层和免疫记忆层，利用改进的动态克隆选择算法对未知和已知入侵行为进行辩识及抵御。实验表明，模型既能抵御入侵行为，又能对整个云计算环境进行实时监控，是一种有效的云计算安全模型。