基于生物免疫的计算机安全研究-运筹与控制专业论文.docxVIP

基于生物免疫的计算机安全研究摘要 基于生物免疫的计算机安全研究 摘要 由于计算机的运行机理和生物体有着天然的相似之处，生物免疫系统成功保 护机体免受各种侵害的机理为研究计算机安全提供了重要的依据。从信息学角度 来看，生物免疫系统实质上是一个大规模的信息处理系统，它具有分布性、自适 应性、健壮性等良好特性，而这正是目前计算机安全系统所不具备的，因而本文 先从分析生物免疫系统入手，剖析生物免疫系统的工作原理，在此基础上构建了 针对计算机安全的人工免疫系统模型。该模型模拟了生物免疫系统中的不完全匹 配，否定选择，记忆等机制，具备较强的信息处理能力。然后本文又将其与多 agent技术相结合，构建了基于免疫的多agent计算机病毒免疫系统和基于免疫的 多agent入侵检测系统。在计算机病毒免疫系统中采用了多层次的防御结构，以 各个功能相异的agent作为独立的实体，实现了高度的分布性，可适应性和健壮 性。在入侵检测系统中则通过基因组合的方式，将学到的知识自动组织起来以对 付一些未知的攻击模式，同时系统能从不同层次收集数据，分析内在关联，不仅 能检测到基于主机的攻击，还能检测到基于网络的攻击。 关键字：生粤争疫季统；人工免疫系统；计算机病毒；入侵检测系统；agem／， 种聋《触0b The The Research Of Computer Security Based On Biological Immune System Abstract Because the operating principle of computer and organism is similar naturally,the principle used by immune system to protect body from invasion provides important warranty for investigation ofcomputer security．From the viewpoint ofinformation，biological immune system in fact is a compelling example of massively-parallel information-processing system．It is distributed，adaptive，mbust that most computer security system today lack．So this p印er is begin with the analyzing of biological immune system，based on which builds an artificial immune system refering to computer security．Artificial immune system which model the principle of imperfect detection,negative selection，memory and so on has the powerful ability of information—processing．This p印er integrates the tecllllOfogy of artificial immune system and multi·agent，builds an agent architecture computer virus immune system(CVIS)and an agent architecture intmsion detection system．The CVIS which has a many-layered defense architecture and various agents which as independent entity has different ability realizes highly distributed， adaptive and robust．The intrusion detection system can organize the knowledge about intrusion mode automatically to deal with the unknown intrusion mode by gene combination．And the system carl collect data from different 1evel and analyze the relationship between them．so it can not