No abstract

Inspired by the immune theory and multi-agent systems, an immune multi-agent active defense model for network intrusion is established. The concept of immune agent is introduced， and its running mechanism is established. The method, which uses antibody concentration to quantitatively describe the degree of intrusion danger, is presented. This model implements the multi-layer and distributed active defense mechanism for network intrusion. The experiment results show that this model is a good solution to the network security defense.With the rapid development of information technology and Internet, many network intrusion technologies have continuously changed, which result in more and more serious damages. However, these intrusion detection technologies [1] , including statistics analysis, feature analysis, data mining, etc., all have some limitations, lack self-adaptation and can only detect the known attacks other than new attack models; The system also lacks robustness, which means that even the error in a local place can affect the whole works. So it is very urgent to build an active defense system, which has the features of self-adaptation, early warning and robustness. The biological immune system (BIS) can identify and kill the intrusion antigens. It can be seen as a distributed autonomous system. Artificial immune systems (AIS) [2][3][4] derived from BIS, and have become an important research direction in the realm of artificial intelligence technologies. In 1994, the negative selection algorithm and the concept of computer immune system were proposed by Forrest [5] . In 1999, Kim [3] proposed dynamic clone selection algorithm, which was used in the network intrusion detection. Agent [6,7] is an entity that has the ability of consciousness, solving problems and communication. With the cooperation and coordination during the isolated agents in a multi-agent system (MAS) [8] , the problems in the complex environment can be solved and it has the features of distribution, robustness.

No abstract

No abstract