入侵检测系统论文基于免疫原理的入侵检测系统的研究.doc

入侵检测系统论文：基于免疫原理的入侵检测系统的研究【中文摘要】随着计算机网络被应用到社会的各个领域,人们对其的依赖程度不断地提高。攻击者的知识不断增加和多样自动化工具的日趋成熟使网络安全问题日益突出。传统的安全技术(身份认证技术、授权与访问控制、防火墙技术等)由于缺乏对层出不穷的攻击行为的主动性,已无法保证网络的安全。入侵检测系统应运而生,它通过分析从计算机网络中收集的若干关键点的信息,从中发现是否有被攻击的迹象存在于网络中,从而作出实时的安全响应。虽然入侵检测系统弥补了传统的安全技术的不足,但是也面临着各种各样的挑战。区分正常和有害行为的异常就是其面临的一个重要的挑战。生物免疫系统的主要功能是识别体内细胞,将其归类为“自我”和“非自我”,并引发适当的防卫机制去除“非自我”。受生物免疫系统的启示,人工免疫系统随之产生。由于人们对生物免疫机制的认识还不深,理论还不丰富,因此人工免疫系统的研究中仍存在着许多挑战,主要包括：缺乏创造性思维,人工免疫系统的研究举步维艰；理论基础研究匮乏；应多与生物免疫学者、数学家交流,为免疫算法建立有用的数学模型。鉴于以上原因,本论文主要对以下几个方面做了研究：1.对生物免疫学当前的成果和进展进行了研究,包括免疫系统的组成和原理以及最新的理论免疫模型和学说。2.对人工免疫系统的一般框架和体系结构以及基于自适应免疫系统的主要算法进行了研究,并针对负选择算法的不足对其进行了改进。3.深入分析了免疫原理,提出了一个基于免疫原理入侵检测系统模型并在模型的检测器生成模块中通过仿真实验证明了本文设计的模型的有效性。图27表6参50【英文摘要】As computer network has been widely applied in society, peoples dependence on network has been greatly increasing. Increasing knowledge of the attacker and the maturation of various automated tools make the network security issues become more and more concerned. Traditional security techniques such as authentication technology, authorization and access control, firewall technology, which lack of the initiatives to detect endless attacks, have been unable to ensure network security. Intrusion detection system came into being. IDS can positively analyze the information of computer networks for finding out the possible intrusion. If intrusion happened, IDS has some real-time security response.Although the disadvantages of traditional security technologies have been overcome, the intrusion detection system also faces various challenges. How to distinguish normal and abnormal behavior is the most important problem. The main function of biological immune system is to identify the body cells, to classify which is “self and “non-self, and to trigger the appropriate defense mechanism to remove “non-self”. Artificial Immune System is inspired by the biological immune system.As peoples understanding of Biological Immune System is not deep enough, and the theory is not integrity, so there are still many challenges in Artificial Immune System. Firstly lack of creative thought in artificial immune system makes the research progress is slow. Secondly lack of basic theory research. In addition, more communication should be made with the biological immune scholars, mathematicians to establish a useful mathematical model for the immune algorithm.For this reasons, the thesiss research focuses on the following aspects:1. Research on the current achievements and progress of Biological Immune System, including composition and principles of Immune System and the latest immune model and theory.2. Research on the general framework and architecture of Artificial Immune System, research on the main algorithm of the Adaptive Immune System, and improve the negative selection algorithm. 3. Research and analyze principle of Immune System, propose an IDS model based on Immune System and the simulation results prove the validity of the designed model.Figure 27 table 6 references 50【关键词】入侵检测系统 负选择算法 人工免疫系统【英文关键词】intrusion detection system negative selection algorithm Artificial Immune System【目录】基于免疫原理的入侵检测系统的研究摘要5-6Abstract6-7目录8-141 绪论14-201.1 课题的背景和意义14-161.2 国内外入侵检测的研究动态16-171.3 国内外主要的入侵检测与防护产品17-181.4 入侵检测技术的发展方向181.5 本文目的和研究内容18-191.5.1 本文的研究目的181.5.2 本文的研究内容18-191.6 本章小结19-202 入侵检测系统20-262.1 入侵检测系统的体系结构20-222.2 入侵检测系统的分类22-242.2.1 根据分析引擎分类22-242.2.2 根据数据源分类242.3 传统入侵检测系统的不足24-252.4 入侵检测系统的评价标准252.5 本章小结25-263 生物免疫系统原理26-403.1 生物免疫系统概述26-273.1.1 免疫的定义263.1.2 免疫的功能263.1.3 生物免疫系统的层次结构26-273.2 人体免疫系统的组成27-313.2.1 免疫组织和器官28-293.2.2 免疫细胞293.2.3 免疫分子29-313.3 免疫机制31-343.4 理论免疫学说和模型34-383.4.1 克隆选择理论34-363.4.2 免疫网络理论36-373.4.3 危险理论37-383.5 本章小结38-404 人工免疫系统40-504.1 建立人工免疫系统的一般框架40-414.2 人工免疫系统的结构41-424.3 形态空间理论42-444.4 自适应的人工免疫算法44-484.4.1 基本概念444.4.2 克隆选择算法44-464.4.3 免疫网络算法46-484.5 人工免疫系统在入侵检测系统中的应用现状484.6 本章小结48-505 基于免疫的入侵检测中算法改进及模型设计50-685.1 对免疫算法中负选择算法的改进50-615.1.1 负选择算法50-525.1.2 负选择算法的发展52-535.1.3 贪婪检测器生成算法53-545.1.4 负选择算法的分类545.1.5 负选择算法的评价指标54-555.1.6 本文对负选择算法的改进55-565.1.7 改进的负选择算法分析56-585.1.8 实验对比58-615.2 基于免疫原理的入侵检测系统模型