Immunity-Based Detection for Large-Scale Behavior of Denial of Service

The network traffics of Denial of Service (DoS) rise in large scale. Adaptive detection technologies for large-scale DoS network behaviors are needed urgently. For the above, a detection method for large-scale DoS behaviors based on Artificial Immune System is proposed in this paper. The feature collection technology is used to efficiently capture large-scale network data. Network features are analyzed to form network behaviors. Network behavior elements are defined as antigens which are classified into self antigens and non-self antigens. Simple matching coefficient is used to realize the match method between antigens. Detectors are defined to simulate the evolution mechanism of AIS. The recognition mechanism in single detection node and the distributed detection mechanism are realized.