一种基于三级内网蜜场系统的网络蠕虫检测技术  

Honeyfarm-based Network Worm Detection Technique in Three-tied Intranet

作　　者：陈志杰[1] 鲜明[2] 

机构地区：[1]国防科学技术大学训练部信息中心,长沙410073 [2]国防科学技术大学电子科学与工程学院,长沙410073

出　　处：《计算机科学》2011年第B10期36-40,共5页Computer Science

基　　金：国家自然科学基金(60372039)资助

摘　　要：在针对内网的入侵行为中以网络蠕虫危害最大,传统的网络安全手段存在缺陷,蜜场技术作为监测和信息搜集手段与传统网络安全手段的本质不同。研究提出了一种基于三级内网蜜场系统的网络蠕虫检测技术,它可以有效提高蠕虫检测速度,对提高内部网络的安全,具有重要实用意义。There are many intrusion activities on the intranet in which network worms cause the greatest harm.Traditional network security means have many deficiencies,as a means of monitoring and information gathering,honey field technology is essentially different with traditional network security measures.A network worm detection method based on honeyfarm of three-tied intranet was proposed.With the ability of improving the speed of worm detection,enhancing the security of internal network,it has important practical significance.

关 键 词：内网 网络蠕虫 蜜场 蜜罐 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]