摘要
为解决现有入侵检测技术对于新类型攻击或隐蔽攻击识别率很低的问题，提出了一个免疫遗传模型来重新构造状态转移分析检测方法。在该模型中使用了由状态链和行为链组成的双链基因模式来表示系统的状态转移，并使用STAT系统的原有检测规则来构造初始的专家DNA疫苗库。试验证明了该模型的有效性。
To solve the IDS's problem of low recognizing ratio to new attacks or stealthy attacks, a new model, recomposing the state transition (ST) method with a immune genetic algorithm, is presented in this paper. In this model, ST method can be expressed in a double DNA chains pattern. The double twisting chains form a state-action sequence to represent the system state transitions. As to still gain the recognizing performance of the regular ID systems, STAT rules is used to create the initial expert DNA library. A host-based test is also performed to prove the effectiveness of this model.
出处
《计算机工程》
CAS
CSCD
北大核心
2004年第4期28-29,48,共3页
Computer Engineering
基金
国家"863"计划基金资助项目(2002AA142010)
关键词
状态转移
入侵检测
免疫遗传计算
State transition
Intrusion detection
Immune genetic algorithm
