A New Intrusion Detection Method Based on Artificial Immune System

Use the algorithm of generating variable-radius detectors to generate detectors. Analyze different effects on detection results by choosing different radii. Test samples need to compare with all detectors to detect intrusions. When the number of detectors is large, the detection speed is slow. Cluster near detectors into an area. The test samples which fall in this area only compare with the detectors in this area not all detectors, so the times of comparing are reduced and the detection speed is increased. For the test sample falling in some area of non-self space which is not covered by any detector, comparing the minimum distance between this test sample and all self training samples with the minimum distance between this test sample and all detectors can judge whether this test sample is non-self It is proved by experiments that this method can increase the detection speed as well as detection rate.