Cooperation modeling for intrusion detection system based on Multi-SoftMan

Abstract

At present, most of the intrusion detection systems (IDS) don't have enough flexibility, intelligentization and maintainability in actual application. Through studying and analyzing the intelligence recognition characteristics of "SoftMan" (SM), a novel cooperation model for intrusion detection system based on Multi-SoftMan alliance (MSMIDS) is proposed to solve these problems. This paper discusses the concepts and various intelligence recognition characteristics in which SoftMan could be applied to the problem of detecting and responding to intrusions. At the same time, the paper visualizes the architecture and system behaviors of the Multi-SoftMan intrusion detection system. Relevant negotiation control process and cooperation control strategy are presented respectively. The experimental results show that MSMIDS is a more adaptive and efficient system. The purpose of the MSMIDS is to bring intelligent negotiation mechanism based on Multi-SoftMan alliance into cooperation system so as to improve the performance and cooperation control capability of the systems. In this way, the system will match the requests. MSMIDS also provides a novel way for implementation of network security system.

Research on the Model and Architecture of Immune-SoftMan

“…If it can not solve them or the effect is very poor, it may try other new methods through learning or association memory and save the best methods in Gene Base. Moreover, these methods may be passed down to sub-ISM [12]. The architecture of ISM is illustrated in Fig.…”