A Double Layers Detection for DoS Based on the Danger Theory

As one of the most common network attacks, denial of service (DoS) usually uses reasonable service requests to take excessive computing and network resources, thus causes the legitimate users to be unable to obtain the service responses. But now little research has performed within the area. This aim of the paper is to develop a double layers detection system for DoS based on the DCs (dendritic cells) - T cells interaction mechanism of the danger theory in immunology. DCs fuse the multiple signals and present the correlated antigens to T cells, and T cells are responsible for the detection for the structure of the antigens. A large number of semi-connections can be viewed as antigens and the corresponding behavior information of the system and network triggered by these semi-connections can be viewed as signals. The theoretic analysis shows that the method of DCs emphasizing the detection of the signals and T cell emphasizing the detection of the corresponding antigens has a good prospect in the application of DoS detection.