Dynamical Immunological Surveillance for Network Danger Evaluation Model

According to correspondence relations of density change of antibody in the artificial immune systems and pathogen invasion intensity, a novel network danger evaluation model is established. When network attacks increase, we simulate human immune system functions to increase the density of antibody; when network attacks decrease, we simulate immune feedback functions and reduce the density of corresponding antibody, restoring it to normal level. By measuring the density of antibody in current system, the danger of network attack in the system can be captured correctly. A new network security evaluation method using antibody concentration to quantitatively analyze the degree of intrusion danger level is presented. And the intrusion detection mechanism based on self-tolerance, clone selection, and immune surveillance is established. The experimental results show that the new model improves the ability of intrusion detection and prevention than that of the traditional passive intrusion prevention systems.