|
Computer and Internet penetration allows the rapid development of information technology , and promote social progress and human civilization . Network security has become a bottleneck restricting the development of science and technology , the traditional firewall technology can not be active as a passive defense against attack , intrusion detection systems can be the emergence of a good solution to this problem. Studies have shown that biological immune system and intrusion detection systems exist many similarities , in recent years, based on artificial immune intrusion detection technology become a research hotspot. Artificial immune system as a biological immune system simulation , has been applied to many aspects . Based on the theory of traditional artificial immune intrusion detection system , there are some problems can not be explained , along with biology research , a new immunological theories - theories have been proposed risk , thus innate and adaptive immunity have been introduced to the artificial immune system in the past. Study found that dendritic cells in the immune system plays a vital role , and thus the function of dendritic cells made ??dendritic cells algorithm, on this basis, this paper made ??some research work. First, the dendritic cells algorithm to do in-depth research , the algorithm for the original antigen and signal sampling stage, the presence of randomly selected cells mature dendritic cells leads to the problem of slow , presents a selective strategy of dendritic cells selected . In order to solve the original algorithm affect its existence between antigens to detect the presence errors cause problems between the impact factor antigen presented the concept to add to the improved algorithm , the experiment shows that the improved algorithm of dendritic cells with high time anomaly detection algorithm reduces the interference between the antigen and improve the detection accuracy, the efficiency of antigen detection time has also been improved, while algorithm has low CPU usage. Again, for the network port scanning attacks commonly used technique is proposed based dendritic cell algorithm port scan detection scheme , and gives the design and implementation process , the algorithm under different scenarios were tested , compared , through experiments that this kind of method can accurately distinguish port scanning behavior , the system has a high detection rate , and has a certain robustness , also reflects the superiority of the algorithm .
|