基于蜜网的网络监测系统的设计与实现  

The Design and Implementation of a Honey-net Based Monitoring System

作　　者：高丰[1] 杜德慧[1] 

机构地区：[1]江南计算技术研究所,江苏无锡214083

出　　处：《信息网络安全》2011年第9期64-65,69,共3页Netinfo Security

摘　　要：文章针对网络入侵、网络欺骗、网上垃圾等恶意网络行为对网络安全的负面影响日益增加,网络行为识别已经成为网络安全的重要组成部分这一现象。文章提出了基于蜜网技术构建网络监测系统,有效利用了蜜网系统的沙箱执行、特征模拟、日志审计和重定向代理的机制,解决了被动监测基础上的数学模型难以有效描述网络恶意行为的问题,在实际运行中取得较好的效果。Malicious network behavior such as network instruction, network cheating and network garbage adds more negative impaction on network security. Network behavior distinguish is now an important composition of network security. In this article, a honey-net based network monitoring system is introduced, which exploit the merits of a honey-net such as sandbox-execution, characteristic-imitation, log-auditing and redirection-proxy. The system resolves the problems in describing malicious network behavior and gets good result in operation.

关 键 词：蜜网系统 网络行为 网络监测 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]