基于Honeypot网络安全技术的数据捕获模块设计  

Data capture model design of network security based on Honeypot

作　　者：乔晓琳[1] 

机构地区：[1]深圳职业技术学院计算中心,广东深圳518055

出　　处：《计算机工程与设计》2008年第17期4430-4432,共3页Computer Engineering and Design

基　　金：深圳市科技计划基金项目(06KJCE037)

摘　　要：在对传统的防火墙和入侵检测技术探讨的基础上,通过对入侵诱骗技术Honeypot系统的研究,设计了一个基于Honeypot技术的数据捕获模块。介绍了基于Linux系统的数据捕获实现方法,其中使用了三层数据捕获来监控攻击者的入侵行为,这样尽可能多地捕获并学习攻击者的相关信息,从而保护系统安全。Based on the investigation of classical firewall, intrusion detection technology and the Honeypot system, a data capture model employing Honeypot technique is proposed. An implementation of data capture based on Linux in which three layers of data capture are deployed to detect the intrusions is introduced. The reason is that the deployment of the layers can detect and learn the information of the intrusions as much as possible. Thus, the system security is guaranteed.

关 键 词：网络安全 蜜罐 入侵检测 数据捕获模块 模块设计 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]