Abstract: The definition of survivability of network was discussed and a new definition on the premise of staying alive was made. The guiding principle of biological immune system to the network survivability was analyzed, and a method for the second development of survivable network system was presented. The survivability of system was controlled by many immune units which were autonomous and distributed. Each immune unit consisted of four logical parts: detection, identification, prevention, and self-adaptation and evolvement. The model, classification and implementation of the immune unit were given. The design is of certain distribution and self-adaptation.

Key words: survivability, immune mechanism, network security, self-adaptation

摘要： 从“生存”的本义，提出了以“生”为前提的生存定义；根据生物免疫系统对生物生存作用的机理，得到可生存网络设计的指导思想；提出一种基于免疫的可生存网络的二次开发方法。此方法中对生存性的保障由一组可自治、分布的免疫单元承担；免疫单元逻辑上由检测、识别、防御和自适应与进化四个部分组成；阐述了免疫单元的构成、分类及若干关键技术的实现。该设计具有一定的分布性和自适应性。

关键词: 可生存性, 免疫机理, 网络安全, 自适应