1. An apparatus for detecting an intrusion code, the apparatus comprising: a set value input unit in which a set value differentiated for each group of a plurality of groups is input; an immune database generation unit which generates an immune database, based on the set value; and an intrusion code determination unit which determines whether data corresponds to an intrusion code, based on the generated immune database.