Full Coverage Detection of Immune Detector for Public Data Set

The immune mechanism plays an unique role in improving the performance of network intrusion detection. However, the traditional immune method fails to give full play to the detection performance of the immune mechanism. In order to solve the above problems, this paper uses KDD CUP'99 as the detection object, and a network anomaly detection method with full coverage of immune detectors is proposed. Based on the immune principle, the intrusion detection process for the data set to be detected is constructed, the expression method of network connection is defined, the immune element data set under the intrusion detection environment are simulated, the classification detection mechanism of memory detector is defined, and the full coverage detection of the detected antigen is realized. A network connection similarity computing method based on the characteristics of the data set to be detected is proposed. The experimental scheme was constructed and the experiment was carried out. The experimental results show that the detection method proposed in this paper can detect all antigens with full coverage and has high performance of intrusion detection.