Three-Level Anomaly Disposal System Model Based on Danger Theory

In order to improve the intrusion detection system based on traditional immune theory, a new three levels anomaly disposal system model based on danger theory was proposed in this paper. The data stream is treated with three levels anomaly disposal in the model, the first level is to recognize the danger and remove the data of non-danger which will not bring damage to the system, for the second level is all dangerous abnormal invasions which will be classified properly, and then the danger will be solved finally at the third level. The designed model improved the system\´s "danger" recognition, reduced the false alarm as well as failed alarm efficiently, and it has strong robustness and cognitive learning ability.