

浏览全部资源
扫码关注微信
东南大学网络空间安全学院,江苏 南京 210000
Received:12 September 2024,
Revised:2015-01-08,
Published:25 April 2025
移动端阅览
李涛, 王昕皖, 胡爱群. 基于免疫系统控制机理的仿生安全模型研究[J]. 网络与信息安全学报, 2025, 11(2): 50-60.
LI T, WANG X W, HU A Q. Biomimetic security model based on immunesystem control mechanism[J]. Chinese Journal of Network and Information Security, 2025, 11(2): 50-60.
李涛, 王昕皖, 胡爱群. 基于免疫系统控制机理的仿生安全模型研究[J]. 网络与信息安全学报, 2025, 11(2): 50-60. DOI: 10.11959/j.issn.2096-109x.2025017.
LI T, WANG X W, HU A Q. Biomimetic security model based on immunesystem control mechanism[J]. Chinese Journal of Network and Information Security, 2025, 11(2): 50-60. DOI: 10.11959/j.issn.2096-109x.2025017.
随着信息系统架构的日益复杂,传统的外壳式防御弊端逐渐显现,主要表现为集中于外部边界的防御难以应对渗透网络内部的威胁和新型未知的高级威胁、边界被攻破易出现单点故障、缺乏综合性和全面性的安全保障。要从根本上解决这些问题,需要变被动为主动,采取更多层次和更综合的防御策略。基于免疫系统控制机理的仿生安全模型被提出,其基于人体免疫系统的控制机理,借鉴分布于人体各处的树突状免疫细胞捕获病原体、遍布于人体结构的血管以血液承载信息实现信息的传递与互通、具有中枢效应的淋巴系统综合处理和分析信息并进行决策,构建具有自主防御功能的系统。以任务为导向,将系统划分为任务组件、转发组件和分布式控制组件3部分,并实现各部分的高度链接与融合。调用任务组件执行基本任务,在执行过程中感知并提取安全数据。安全数据经转发组件初步处理和判断后,被转发至控制组件。控制组件基于安全决策树生成决策进行校准,从而实现针对异常情况的主动防御。实验结果表明,此模型对系统异常攻击的防御成功率达98.9%,并基本实现仿生免疫模型从捕获、提呈、传递、分析、决策到效应的全链路机制。
The limitations of traditional perimeter-based defense mechanisms have gradually become apparent as information system architectures have become increasingly complex
with defense concentrated on the external boundary becoming difficult to deal with threats that penetrate into the network interior
new and unknown advanced threats
the breach of the boundary being prone to a single point of failure
and a lack of comprehensive and all-round security guarantees. A biomimetic security model based on the control mechanisms of the immune system was proposed to address these problems. The model was designed to achieve information learning by mimicking the functions of dendritic immune cells distributed throughout the human body to capture pathogens
the blood vessels that carry information transmission and intercommunication
and the lymphatic system that comprehensively analyzes and processes information and makes decisions. A system with autonomous defense functions was thus built. Task-oriented
the system was divided into three components: task component
forwarding component
and distributed control component
with all parts being highly interconnected and integrated. The task component was designed to perform basic tasks and extract security information during execution. The security information was initially processed and judged by the forwarding component and then forwarded to the control component. The control component generated decisions based on the security decision tree for calibration
thereby achieving active defense against abnormal situations. The experimental results showed that the success rate of the proposed model in defending against system anomaly attacks reached 98.9%. Furthermore
the model fundamentally realized the full-chain mechanism of the biomimetic immune model
from capture
presentation
and transmission to analysis
decision-making
and effectuation.
FARMER J D , PACKARD N H , PERELSON A S . The immune system, adaptation, and machine learning [J ] . Physica D: Nonlinear Phenomena , 1986 , 22, 2 ( 1-3 ): 187 - 204 .
邬江兴 . 网络空间内生安全发展范式 [J ] . 中国科学: 信息科学 , 2022 , 52 ( 2 ): 189 - 204 .
WU J X . Development paradigm of endogenous security in cyberspace [J ] . Science China Information Sciences . 2022 , 52 ( 2 ): 189 - 204 .
MALIK J , MUTHALAGU R , PAWAR P M . A systematic review of adversarial machine learning attacks, defensive controls and technologies [J ] . IEEE Access , 2024 .
仝青 , 张铮 , 张为华 , 等 . 拟态防御 Web 服务器设计与实现 [J ] . 软件学报 , 2017 , 28 ( 4 ): 883 - 897 .
TONG Q , ZHANG Z , ZHANG W H , et al . Design and implementation of mimetic defense for web servers [J ] . Journal of Software , 2017 , 28 ( 4 ): 883 - 897 .
SIYUAN N , HONGCHAO H , WENYAN L , et al . Security levels oriented deployment algorithm for mimic SaaS cloud [C ] // Proceedings of the 6th International Conference on Computer and Communications (ICCC 2020) . Piscataway : IEEE Press , 2020 : 2409 - 2414 .
WANG L , ZHAO Z , LIU H . AI-driven mimic defense systems: opportunities and Challenges [J ] . Journal of Intelligent Cybersecurity , 2022 , 15 ( 6 ): 50 - 63 .
顾天晟 , 曾福康 , 邵思思 , 等 . 基于拟态防御和Paillier加密的智能物联网终端安全防护方法 [J ] . 网络与信息安全学报 , 2024 , 10 ( 6 ): 164 - 176 .
GU T S , ZENG F K , SHAO S S , et al . Security protection method based on mimic defense and Paillier encryption for smart IoT terminals [J ] . Chinese Journal of Network and Information Security , 2024 , 10 ( 6 ): 164 - 176 .
FORREST S , SOMAYAJI A , ACKLEY D H . Building diverse computer systems [C ] // Proceedings of the 6th Workshop on Hot Topics in Operating Systems , HotOS-VI, Cape Cod . Piscataway : IEEE Press , 1997 : 67 - 72 .
OU Z M . Host-based intrusion detection systems inspired by machine learning of agent-based artificial immune systems [C ] // Proceedings of 2019 IEEE International Symposium on INnovations in Intelligent Systems and Applications (INISTA) . Piscataway : IEEE Press , 2019 : 1 - 5 .
ZHANG R , XIAO X . An intrusion detection method based on changes of antibody concentration in immune response [J ] . Journal of Information Processing Systems , 2019 , 15 ( 1 ): 137 - 150 .
ZAREIZADEH Z , HELFROST M S , RAHIDEH A , et al . A robust gene clustering algorithm based on clonal selection in multi-objective optimization framework [J ] . Expert Systems with Applications , 2018 , 113 : 301 - 314 .
LUO W , LIN X , ZHU T , et al . A clonal selection algorithm for dynamic multimodal function optimization [J ] . Swarm and Evolutionary Calculation , 2019 , 50 : 100459 .
LI L , LIN Q , LI K , et al . Vertical distance-based clonal selection mechanism for the multiobjective immune algorithm [J ] . Swarm and Evolutionary Computation , 2021 , 63 : 100886 .
LIANG Z X , DING Y S , FANG J , et al . Reliability design model research of next-generation network based on bio-network [C ] // Proceedings of 2009 Asia-Pacific Conference on Information Processing . Piscataway : IEEE Press , 2009 : 509 - 512 .
JAIN P , SINGH P K , ABRAHAM A . Intrusion detection and self healing model for network security [C ] // Proceedings of the 7th International Conference on Next Generation Web Services Practices . Piscataway : IEEE Press , 2011 : 320 - 325 .
于全 , 任婧 , 李颖 , 等 . 类生物免疫机制的网络安全架构 [J ] . 网络空间安全 , 2020 , 11 ( 8 ): 6 - 10+22 .
YU Q , REN J , LI Y , et al . Network security architecture of biological immune mechanisms [J ] . Cyber Space Security , 2020 , 11 ( 8 ): 6 - 10+22 .
胡爱群 , 方兰婷 , 李涛 . 基于仿生机理的内生安全防御体系研究 [J ] . 网络与信息安全学报 , 2021 , 7 ( 1 ): 11 - 19 .
HU A Q , FANG L T , LI T . Research on bionic mechanism based endogenous security defense system [J ] . Chinese journal of network and information security , 2021 , 7 ( 1 ): 11 - 19 .
BRODIN P , DAVIS M M . Human immune system variation [J ] . Nature Reviews Immunology , 2017 , 17 ( 1 ): 21 - 29 .
CHEN S , SAEED A F U H , LIU Q , et al . Macrophages in immunoregulation and therapeutics [J ] . Signal Transduction and Targeted Therapy , 2023 , 8 ( 1 ): 207 .
SUO C , DANN E , GOH I , et al . Mapping the developing human immune system across organs [J ] . Science , 2022 , 376 ( 6597 ).
彭伟涛 , 任玥 , 吴晓牧 . 固有免疫和适应性免疫在病毒性脑炎发病中的作用机制 [J ] . 中国神经免疫学和神经病学杂志 , 2020 , 27 ( 6 ): 466 - 469 .
PENG W T , REN Y , WU X M . The role of innate and adaptive immunity in the pathogenesis of viral encephalitis [J ] . Chinese Journal of Neuroimmunology and Neurology , 2020 , 27 ( 6 ): 466 - 469 .
CYSTER J G , ALLEN C D C . B cell responses: cell interaction dynamics and decisions [J ] . Cell , 2019 , 177 ( 3 ): 524 - 540 .
0
Views
52
下载量
0
CSCD
Publicity Resources
Related Articles
Related Author
Related Institution
京公网安备11010802024621