以Honeyd为基础的虚拟蜜罐系统仿真设计与部署  

Design and Deployment of A Honeypot System Based on Honeyd

作　　者：张海峰[1] 陈世基[1] 

机构地区：[1]嘉应学院计算机学院,广东梅州514015

出　　处：《嘉应学院学报》2013年第5期22-26,共5页Journal of Jiaying University

基　　金：梅州市科技计划项目(311C01)

摘　　要：honeyd作为一款开源仿真软件,其优势在于能够在一台机器上模拟整个网络,比如多跳,丢包率,延时等.本系统采用以honeyd为基础的虚拟仿真网络,辅以SQL injection模拟攻击,对其拓扑结构、安装部署以及数据记录分析等相关内容进行详细描述,构建出一套相对完整的蜜罐仿真系统.同时,进一步分析该系统的未来拓展及其方向.One useful feature of honeyd, as an open source software, has its capability to simulate an entire network topology within one machine with multiple hops, packet losses and latency. The paper details a virtual simulation network based on software honeyd. Then the paper gives an overview about its topology, and tells us how to install and deploy it. Meanwhile, the paper shows an idea for recording and analyzing the data which attacks from SQL injection. We build a relatively complete set of the honeypot system. In the end, further analysis of the system is given.

关 键 词：蜜罐 蜜网 NIDS网络安全 

分 类 号：TP393[自动化与计算机技术—计算机应用技术] TP309[自动化与计算机技术—计算机科学与技术]