ISM-based architecture for network security system

Traditional network security system and technology lack self-adaptation, intelligentization and the ability of parallel distributed processing. Inspired by the intelligence recognition capability of Immune-SoftMan (ISM), a novel distributed architecture which based on multi-ISM alliance for network security system is thus proposed. The component functions are put up and component collaborations in the network are presented here. This system adopts new analysis schemes to aim to reduce the relativity of each ISM component as far as possible and avoid the single point failure caused by the single central analyzer. Compared with traditional intrusion detection systems (IDSs), this system is a more adaptive and efficient system. It enables member sites of ISM components in the same trust community or different ones to forewarn attacks cooperatively, and possesses higher detection rate, load balancing and better self-adaptability. By analyzing these mechanisms, it aims to guide the future research on cooperation, negotiation and coordination of multi-ISM system under open, heterogeneous and dynamic network environment.