An Adaptive LAN Intrusion Detection System Based on Computer Immunology

Tie-Shan Zhao,Zeng-Zhi Li,Ze-Min Wang,Xiao-Jun Lin
DOI: https://doi.org/10.1109/robio.2007.4522517
2007-01-01
Abstract:It is very useful to design adaptive LAN intrusion detection systems to improve the security of LANs. If a network connection links to an open port of an active host, it is defined as a normal one; otherwise, it is defined as an abnormal one. Rationality of the definitions is proved. Normal connections are self-bodies. A correct and complete self-body set can be used for an antibody set. If a new network connection doesn't match any self-body, it is abnormal. An adaptive antibody generation model is presented firstly. Based on it, an adaptive intrusion detection system is introduced. Experiments show that the system is feasible: the detection rate of intruders' scans is 100%, of intruders' random probes is more than 98%, and there are no false alerts.
What problem does this paper attempt to address?