Network intrusion detection method based on multilayer immunization

Abstract

The invention provides a network intrusion detection method based on multilayer immunization. The method includes: an innate immunization layer performs autologous clustering on a network normal data packet to generate a pattern detector set so as to realize quick response to a known attack; a self-adaptive immunization layer generates a mature detector set used for network data packet abnormality detection through secondary negative selection so as to eliminate network attacks and intrusion that the innate immunization layer cannot eliminate; and a detection response layer uses the pattern detector set generated by the innate immunization layer and the mature detector set generated by the self-adaptive immunization set to perform parallel and dynamic detection on network data to be detected, and feeds back to the innate immunization layer and the self-adaptive immunization layer according detection results so as to improve system detection efficiency and quality.

Description

technical field [0001] The invention belongs to the technical field of information security, in particular to a network intrusion detection method based on multi-layer immunity. Background technique [0002] With the continuous development of network technology, the Internet has become one of the indispensable and important tools in people's study, work and life; but on the other hand, the open Internet has also led to virus invasion and network attacks, which have become Internet disasters. Virus intrusion and network attack affect the safe use of the network from many aspects. The main hazards include: damage to computer software and hardware resources and network facilities, damage to normal network services and information, and damage to political, economic, social and cultural aspects. hazards. At present, my country's network infrastructure is relatively backward, and network intrusion protection measures are relatively insufficient. The demand for network security is...

AI Technical Summary

Problems solved by technology

[0007] The purpose of the present invention is to solve the shortcomings of too many detectors generated, too low detector generation efficiency and too high detection false alarm rate in the existing network intrusion detection method based on artificial immunity, and to provide a mature detector that can effectively reduce the generation A network intrusion detection method based on multi-layer immunity that improves the generation efficiency of mature detectors and further reduces the detection false positive rate while maintaining a stable detection rate

Images