计算机工程与应用 ›› 2008, Vol. 44 ›› Issue (25): 92-95.DOI: 10.3778/j.issn.1002-8331.2008.25.028

• 网络、通信、安全 • 上一篇    下一篇

基于抗原/抗体多样性机制的入侵特征表述与识别

徐 慧1,王杰华1,张 琨2,刘凤玉2

  

  1. 1.南通大学 计算科学与技术学院,江苏 南通 226019
    2.南京理工大学 计算机科学与技术学院,南京 210094
  • 收稿日期:2007-02-09 修回日期:2007-06-28 出版日期:2008-09-01 发布日期:2008-09-01
  • 通讯作者: 徐 慧

Expression and recognition of intrusion signature based on varieties of antigen & antibody

XU Hui1,WANG Jie-hua1,ZHANG Kun2,LIU Feng-yu2   

  1. 1.School of Computer Sci. & Tech.,Nantong University,Nantong,Jiangsu 226019,China
    2.School of Computer Sci. & Tech.,Nanjing University of Science and Technology,Nanjing 210094,China
  • Received:2007-02-09 Revised:2007-06-28 Online:2008-09-01 Published:2008-09-01
  • Contact: XU Hui

摘要: 在生物免疫系统中,通常是在自身免疫细胞数远远小于可能抗原的情况下,成功应对几乎所有抗原,这主要得益于抗体的多样性。论文分析了攻击特征组成上与抗原的相似性后,提出了“特征元素-特征因子-特征基-攻击特征”的多层次、多特征融合的特征表述方法;给出基于该方法的IDS特征提取与识别算法。该特征表述方法使检测器具有多样性,为检测器自适应进化奠定了基础。

关键词: 生物免疫, 抗原, 抗体, 多样性, 特征表述, 入侵检测

Abstract: In the biological immune system,immune cells usually succeed in dealing with nearly all antigens under the condition that its counts is far smaller than possible antigen oneself,this benefits from the variety of antibody mainly.This paper analyzes a similarity between attack characteristic and antigen,and then puts forward a new expression of signature with the multi-level & multi-characteristic fuzzy with characteristic element,characteristic factor,characteristic base and intrusion pattern.The paper also provides algorithms of drawing and discerning IDS signature based on this expression.The expression inspired by varieties of antigen or antibody makes the intrusion detectors have variety,and more importantly,establish the foundation that the detection evolves.

Key words: biological immunity, antigen, antibody, variety, expression of signature, intrusion detection