基于动态阵列蜜罐的协同网络防御策略研究  

Research on dynamic array honeypot for collaborative network defense strategy

作　　者：石乐义[1] 李婕[1] 刘昕[1] 贾春福[2] 

机构地区：[1]中国石油大学(华东)计算机与通信工程学院,山东青岛266555 [2]南开大学信息技术科学学院,天津300071

出　　处：《通信学报》2012年第11期159-164,共6页Journal on Communications

基　　金：国家自然科学基金资助项目(60973141);山东省中青年科学家科研奖励基金资助项目(2009BSA05001);中央高校基本科研业务费专项基金资助项目(27R0907018A;11CX04052A)~~

摘　　要：从虚实结合动态变化的兵阵对抗得到启发,提出动态阵列蜜罐概念,通过多机协同、功能角色的周期或伪随机切换,形成动态变化的阵列陷阱,从而达到迷惑和防范攻击者的目的。给出了动态阵列蜜罐防御模型,通过NS2网络模拟器对动态阵列蜜罐进行了系统仿真和测试,基于Java平台设计实现了动态阵列蜜罐原型系统并进行了攻击实验。仿真测试和原型实验结果均表明动态阵列蜜罐系统具有良好的网络对抗性能。Inspired by the ancient battle diagram for millitary purpose, a concept of dynamic array honeypot was proposed to bewilder the attackers by coordinating and changing the role pseudo-randomly as a huge dynamic puzzle. The dynamic array honeypot model was presented, system simulation through NS2 was performed, and the prototype implementation with Java was carried out. Detailed empirical studies were launched upon both the simulation model and the prototype. The simulation results demonstrates that the dynamic array honeypot system is feasible and effective for active network confrontation.

关 键 词：动态阵列蜜罐 网络防御 兵阵 协同控制 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]