蜜罐与免疫入侵检测系统联动模型设计  

Design of Linkage Model of Honeypot and Immune Intrusion Detection System

作　　者：李学宝[1] 

机构地区：[1]内蒙古包头师范学院信息科学与技术学院,包头014030

出　　处：《现代计算机》2011年第4期77-80,共4页Modern Computer

基　　金：内蒙古高等院校重点项目(No.NJ10162);内蒙古自然科学基金资助项目(No.2010BS0904)

摘　　要：网络攻击手段的多样性和攻击行为的动态性,给网络安全防御带来了困难。在基于免疫危险理论的入侵检测系统基础上,结合蜜罐技术和重定向机制,提出一个蜜罐和免疫入侵检测系统联动模型。介绍该模型的功能模块构成,分析检测器和危险信号相关机制。与其他模型相比,该模型具有主动性、动态性和低漏报率等优点。The multiplicity of the network attack method and the dynamic of the network aggressive behavior bring difficulties to network security defense.Presents a linkage model of honeypot and immune intrusion detection system based on immune danger theory intrusion detection system, combining the redirection mechanism and honeypot technology.Introduces the function modules in details and analyses some mechanisms related to the detector and the danger signal.Comparing with other intrusion detection system,this module has many advantages,such as initiative,dynamic,lower false positive rate and so on.

关 键 词：蜜罐 免疫危险理论 入侵检测系统 联动 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]