基于IPv6的免疫入侵检测自我集生成方法

摘要

The intrusion detection based on artificial immune theory has become an important direction in the field of network security research.Both the immune tolerance and intrusion processes of the intrusion detection need matching operation.The effective feature encoding for self/nonself must be performed before the matching operation because it affects the intrusion system efficiency and reliability.IPv6 protocol is analyzed with the protocol analysis technology.An encoding scheme of IPv6 data packet is proposed.It can generate a self set effectively.%基于人工免疫的入侵检测已成为网络安全研究领域的一个重要方向.基于人工免疫的入侵检测的免疫耐受过程和检测过程都需要进行匹配操作,匹配的前提是必须对"自我"与"非我"进行有效的特征编码,编码方案的好坏关系到检测系统的效率及准确率.通过介绍协议解析技术,对IPv6协议进行分析,提出一种IPv6数据包编码方案,能够较有效地生成自我集.