关键词: 入侵检测, 分布式, 人工免疫系统, 阴性选择, 分布式拒绝服务攻击

Abstract: Concerning the problem of excessive interaction flow, single point failure and low detection efficiency in existing Distributed Intrusion Detection System (DIDS), a new distributed intrusion detection model based on artificial immune theory was proposed. The new distributed intrusion detection model presented a central detector configuration and method of use and combined misuse detection and anomaly detection. The simulation model was designed based on OMNeT+〖KG-*3〗+ network simulation platform and experiments were run. According to the simulation results, the model overcomes excessive interaction flow problem of the fully distributed system, solves the problem of single point failure and improves the detection efficiency effectively. The simulation results verify the validity and effectiveness of the improved model.

Key words: intrusion detection, distributed, Artificial Immune System (AIS), negative selection, Distributed Denial of Service (DDoS)