基于蜜罐特征的蜜罐识别技术  

Anti-Honeypot Based on Honeypot Characteristic

作　　者：程晓伟[1] 杨百龙[1] 

机构地区：[1]第二炮兵工程学院,陕西西安710025

出　　处：《现代电子技术》2009年第15期89-92,共4页Modern Electronics Technique

摘　　要：为了进一步推动蜜罐识别技术的发展,讨论了目前针对低交互性蜜罐和高交互性蜜罐的识别原理和识别方法,阐述蜜罐的设计思想和实现机制,在前人的基础上进一步提出了基于蜜罐特征的识别技术,即通过蜜罐个性指纹、协议栈和网络特征分析蜜罐个性特征和共性特征,进而对蜜罐进行识别,最后对蜜罐识别技术进行了分析和展望。For the sake of improving the development of anti - honeypot, the recognition principle and methods on how to detect the low - interaction honeypot and the high - interaction honeypot are introduced, analysis of the design idea and realization of the mechanism are proposed, on the foundation of senior people, anti- honeypot based on the honeypot characteristic is put forward,according to the honeypot fingerprinting personality, protocol stacks and network feature, honeypot＇s common personality traits and characteristics, the honeypot,the directions of further work on anti - honeypot technology are analysed.

关 键 词：蜜罐识别 低交互性蜜罐 高交互性蜜罐 共性特征 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]