Research of DoS Intrusion Real-time Detection Based on Danger Theory

Denial of Service (DoS) attack is one of the most common network attacks on network in the present. Usually DoS attack is often executed in fraudulent way, so they have the characteristic of fraudulence and danger. A new method of DoS intrusion detection based on the immune danger theory is presented in the paper, according to the characteristic of DoS intrusion. In the method, a definition of danger signal with a formula of computing it quantificationally is presented. And the method is tested by experiment in which DoS intrusion is detected in the real-time way. The results of the experiment show that the method can not only detect DoS intrusion in the real-time way, but also have the advantage of working with less false positive rate and with faster response. It is an effective method for DoS intrusion detection.