The invention discloses an unknown network
threat immunodetector generation method and device, and relates to the technical field of
network security, and the method comprises the steps: S1, obtaining a training sample; s2, performing
antigen presentation to obtain a training autoantigen set and a training non-autoantigen set; s3, extracting an edge autoantigen; s4, deducing an unknown non-autologous
antigen by using the edge autoantigen; s5, carrying out tolerance training on unknown non-autoantigen and autoantigen, adding the
antigen subjected to tolerance training as a mature
antibody into the t-th generation non-autoantigen set, and generating a
network attack detector; s6, judging whether t reaches a preset number of times, and if so, ending; otherwise, entering S7; s7, enabling t + 1 to be equal to t, and returning to S3; according to the method, the autoevolution of the
detector is realized, and the immune
detector capable of detecting unknown is generated, so that the immune detector can dynamically adapt to an unknown
network attack mode; according to the method, an edge benign detector can adaptively optimize and construct an unknown
attack process, and unknown network threats can be efficiently and accurately detected.