蜜罐信息采集技术分析  

Analysis of Information Gathering Technology Based on Honeypot

作　　者：翟继强[1] 乔佩利[1] 

机构地区：[1]哈尔滨理工大学计算机科学与技术学院,黑龙江哈尔滨150080

出　　处：《哈尔滨理工大学学报》2007年第3期69-72,76,共5页Journal of Harbin University of Science and Technology

基　　金：国家科学与技术部社会公益研究专项基金(DIB2J218)

摘　　要：为提高网络安全研究中攻击信息收集的有效性和针对性,探讨了一种主动防御的网络安全技术——蜜罐.通过主动吸引黑客的攻击,来监视和跟踪入侵者的行为并进行记录,从而研究入侵者所使用的攻击工具、策略和方法.介绍了蜜罐技术的基本概念,分析了蜜罐的安全价值,并详细讨论了蜜罐的信息收集技术.最后,讨论了蜜罐系统面临的安全威胁与防御对策.In order to improve the validity and pertinency of gathering attack information in network security research, the paper introduces the new active network security technology - - Honeypot. , which can attract attacks, and monitor and track attacker, and record the relevant actions so that they can be analyzed to study the tools, tactics and methods of the intruder. The paper introduces the basic theory of honeypot, and the security values of Honeypot are analyzed, then the technology of gathering information are researched in detail. And the security threat and defense tactics of the honeypot system are discussed.

关 键 词：蜜罐 交互性 入侵检测系统 防火墙 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]