一种混合型蜜罐的研究与分析  

Research and analysis of mixed honeypot

作　　者：赵跃华[1] 唐曼[1] 

机构地区：[1]江苏大学计算机科学与通信工程学院,江苏镇江212013

出　　处：《计算机应用研究》2011年第11期4341-4344,共4页Application Research of Computers

摘　　要：针对传统蜜罐的交互度与安全性不能两全的问题,提出了一种高伪装的混合型蜜罐模型。该模型是由诱骗系统和伪装服务系统构成。诱骗系统以弱化系统的方式动态配置高交互的蜜罐来引诱入侵者,再利用重定向技术将入侵数据流引向高伪装的服务系统中,同时部署蜜网网关进行数据控制和数据捕获。通过对相关技术指标的分析可知,该模型整体上具有较高的交互度和欺骗性。In view of tradition honeypots have difficulty in balance between interaction level and security,this paper proposed a hybrid type and high pretended honeypot.The model was composed of trap system and fictitious service system.Trap system configured dynamically high interaction honeypot with weak system in order to tempt attacker,then it used redirect technique to lead invasive data stream into a high pretended honeypot system,and it also deployed honeywall to control data and capture data.The result of technical specification analysis shows that this model has a higher interaction level and better fraudulence as a whole.

关 键 词：混合型蜜罐 诱骗系统 重定向技术 服务欺骗 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]