Adaptive and Distributed Network Security System Based on Immune-SoftMan

MA Zhan-fei,ZHENG Xue-feng,TU Xu-yan

DOI: https://doi.org/10.3969/j.issn.1000-1220.2012.10.015

2012-01-01

Abstract:Inspired by the intelligence recognition characteristics of "Immune-SoftMan"(ISM),a novel adaptive and distributed cooperation model for the network security system based on ISM(ISMNSS) is thus proposed.The system model is adopted the partial-global planning(PGP) strategy and the non-center control distributed architecture of autonomy ISM to adapt to heavy network loads of detection tasks.At the same time,the system model combines the level model and collaboration model of the merits,and improves the traditional integrating and immutable framework of the distributed intrusion detection system(DIDS).Theoretical analysis and experimental results show that the ISMNSS is a flexible distributed network security system.The ISMNSS enables member sites in the same trust community or different ones to forewarn attacks cooperatively.Compared with the traditional Snort system,the system possesses higher detection rate,load balancing and better self-adaptability,etc.The ISMNSS also provides a novel way for implementation of the network security system.