Immune system is a highly collateral distributed, adaptive information processing learning system [3] . The system can recognize self and non-self materials, eliminate and defend foreign invasive viral substances or molecules. In order to recognize self and non-self materials, in biological systems, it usually has T cells that specially detect antigen and B cells that produce antibody. There are two types of T cells. One kind is the helper T cell Th that is in the majority to be responsible for promoting B cells to secrete antibodies and strengthen the immune function of T cells and macrophage; another kind is suppressor T cell Ts, which activates under the action of cytokines to form effector cell and eliminate bad cells.

The immune response can be divided into three phages: immune recognition phase, antibody production stage, antigen elimination stage.

1) Immune recognition phase: when external antigen enters in the system, at first, the T cell does immunological recognition. If it recognized similar antigen and retain the information before, the memory part of T cell will combine with the antigen to realize immunological recognition;

2) Antibody production stage: if T cell has recognized the antigen, T cell will be activated and stimulate B cell to secrete large amounts of antibodies;

3) Antigen elimination stage: antibodies produced by B cell combine with antigen, which destroy the activity of antigen and it excretes the antigen out of the body. The antigen disappears, and the immune system returns to normal.

Immune algorithm is the learning algorithm based on the immune system [4] , and there are four basic elements, antigen recognition, antibody formation, immune selection and immune memory respectively. In the algorithm, regard the objective function of the optimal solution as the antigen, including problems to be solved and various constraint conditions. Solve the fitness function of and regard it as antigen, search the direction and the distribution of solution group according to concentration adaptive modulation of antibody. The representa-

tion of immune selection is. Immune memory refers to reserving the solving result of a

specific problem and characteristics and parameters of the problem as initial solutions to solve the similar problems next time so as to accelerate the solving speed and effect.

The process to realize immune algorithms is as follows:

1) Initialization, randomly generate initial B cell mass

2) Calculate the fitness of each B cell to generate antibodies

3) Save B cell with the optimal antibody as immune memory cell

4) Calculate the concentration of antibody and generate B cell mass according to the probability of immune selection.

5) forms the next generation of B cell through clone and differentiation.

6) If immune memory cell hasn’t completely recognized antigen, return to step 2).

It is easy to find the corresponding relation between immune system and Ad Hoc network through analyzing the division of labor of lymphocyte, T cell, B cell and the working mechanisms of mobile agent in immune system. The security architecture of Ad Hoc network is equivalent to the entire immune system; misbehavior nodes in Ad Hoc network are equivalent to the antigens in immune system; normal nodes in Ad Hoc network are equivalent to healthy cells in immune system; mobile agent in Ad Hoc network is equivalent to lymphocyte in immune system and responsible for transporting other agents with specific function. In view of the function of T cell and B cell, three types of agents have been set in the system, and they are monitoring agent, coordinating agent and blocking agent respectively. Monitoring agent is equivalent to T cell in immune system, distributes in all the nodes of the whole system, and it is responsible for collecting behavior information of neighbor nodes and regularly reports it to coordinating agent; coordinating agent distributes in different areas of the network and it is equivalent to B cell in immune system and responsible for arranging the information of nodes in the charge of it in the network and storing it into information memory bank. When coordinating agent receives a new report, it will compare the report with the information in memory bank and strategy library. If it is normal information, the agent will ignore it; if it isn’t normal behavior information (if a node receives routing information and doesn’t transpond), judge the time difference of bad report at the same node in last time. If the interval is nearer, then accumulate. Otherwise, remove the bad report number of this node. If it exceeds the threshold value, activate the blocking agent. Blocking agent is equivalent to antibody in immune system and can clone itself. Its task is to eliminate the misbehavior nodes [6] . Coordinating agent needs certain tolerance and can tolerate a small amount of bad behavior of individual nodes (some bad behaviors may be caused by network interference).

The safety verification of antibody moving from point to is described as follows:

When the antibody begins to roam, produces a random number and a, and then calculate and, send to. When the antibody reaches, checks the chain relationship.

When the antibody moves to the position near the goal node, it clones, mutates and compresses [7] and produces a large number of antibodies that can kill the “virus”. These antibodies will isolate the communication between misbehavior nodes and other nodes in network and achieve the purpose of eliminating harmful nodes. When misbehavior nodes disappear, blocking agent will vanish by itself.

The mathematical description of antibody clone is as follows:

For binary coding, antibody. Among them, represents the collection formed by all the binary strings with length of l. Antibody cluster is n tuple of antibody a.

Clone operator is defined as follows:. Among it,

. is dimensional row vector. Usually take

. Among it, is concerned set value of clone size and is

top integral function. After the clone operation, it generates intermediate population and.

The mathematical description of the variation is as follows:

, H is Hamming distance. After variation, it generates in-

termediate population and.

The main effect of compression choice is to choose n antibodies with the highest affinity in intermediate population to form a new generation of antibody group.

Evaluate the immune system in the form of weighted sum, and the evaluation function is . In this formula, and are weighted system of stimulating effect and inhabitant activity.

It is can be seen from Figure 1 that when there is no attack in network, the message delay maintains at a relatively low level and the network communication is normal shown in the figure as “●”; when the network appears attack, the delay rate of message will rise rapidly. With the extension of time, network performance becomes worse and worse and the worst result is network paralysis, shown as “▲”; after applying the method of immune agent in network, the number of message delay of the system will reduce sharply, shown as “■”. Although it is higher than the message delay rate when there is no attack, it is still in a lower level and acceptable.