Simulation modeling of network intrusion detection based on artificial immune system

Abstract

There is much comparability between natural immune system and computer security, and the key point is how to distinguish self from other. Based on the principles and structures of artificial immune system, the simulation modeling of network intrusion detection was developed. The model consisted of many nodes that distributed across different locations. The nodes needed not be centralized controlled. The purpose of model was to distinguish between illegitimate behavior (non-self) and legitimate behavior (self). In case of finding abnormity, model could give an alarm to user. © 2010 Springer-Verlag.