As so many novel network-based attacking behaviors have emerged in the Internet, it is increasingly difficult to protect the security of the network with traditional defense facilities, such as the Firewall and IDS. To solve this problem, a new multi-layers architecture of Artificial Immunity-Based Proactive Defense System (AIPDS) is put forward in this paper, which consists of detection layer, defense layer and user layer. According to the grown-up course of the B-Cells and T-cells in human lymphatic tissues, a B-Detector and T-Detector is designed to identify the unknown intrusions and the training algorithm of the Detector has also been given. Finally, a testing is done to prove that the AIPDS has an advantage over the traditional IDS.
['Minsheng Tan', 'Hongxiao Yu', 'Zhiguo Zhao', 'Zhaohui Liu', 'Fangju Liu']
An artificial immunity-based proactive defense system