Storage-based Dynamic Intrusion Detection System
If the operation systems are compromised,the authentication sub-system will regard the intruder as a legitimate user.the storage system should be capable of the user activity diagnosis.Storage-based intrusion detection systems(SIDS)allows storage systems to watch for suspicious activity.This paper presents a novel storage-based intrusion detection scheme to monitor the user's activities using the artificial immune technique.Compared with the previous SIDS prototype,the SIDS using artificial immune technique can continue to operate even meet a strange suspicious behavior.a set of appropriate parameters of algorithm are fitted according to the mean convergence speed and detection efficiency.The simulation shows the proposed scheme can reach higher detection rate and lower false alarm rate than the previous.