An Edge IDS Based on Biological Immune Principles for Dynamic Threat Detection

Table 1

AIS vs. IDS.

Items	AIS	IDS
Entity in detection process	Antigenic determinant	Behavior mode of the detected strings
	Receivers—the chromosome or organ that needs to be checked	Normal-mode strings
	Single clone lymphocyte	A detector placed at the security monitoring boundary
	Antigen	Nonself string
Behavior representation of detection	Binding—the response of an antibody to an antigen	Match between normal-mode strings and nonself strings
	Behavioral confirmation	Negative selection
	Clone of lymphocytes	Duplication of detectors
	Detection of antigens	Detection of network traffic behavior
	Cleaning antigens	Response action of detectors