基于网络扫描技术的动态蜜罐网络设计与实现  

Design and implementation of the dynamic honeypot network based on network scanning technology

作　　者：向全青 

机构地区：[1]哈尔滨庆缘电工材料股份有限公司,哈尔滨150040

出　　处：《信息技术》2013年第6期157-161,165,共6页Information Technology

摘　　要：面对网络上复杂而多变的黑客攻击,提出利用虚拟蜜罐技术和网络扫描技术构建动态自适应虚拟网络的方法来迷惑攻击者,延缓和转移攻击,消耗攻击资源,保护实际网络环境,并收集攻击信息。首先介绍了蜜罐技术的基本概念和虚拟蜜罐框架Honeyd,详细分析了系统所使用的各种网络扫描技术,特别是主动式协议栈指纹分析技术,进而设计并实现了该动态虚拟网络系统,并对系统进行了测试,结果证明该设计可以成功地虚拟网络环境,最后分析了该设计的不足,并对下一步研究做了展望。The method of constructing a dynamic and self-adaptive virtual network is suggested to puzzle adversaries, delay and divert attacks, exhaust attacker resources, and collect the attacking information. The concepts of honeypot and the honeyd, which is the frame of virtual Honeypot are introduced. The techniques of network scanning including active fingerprint recognition are analyzed. Dynamic virtual network system is designed and implemented. A virtual network similar to real network topology is built according to the collected messages from real environments in this system. By doing this, the system can perplex the attackers when Hackers attack and can further analyze and research the attacks. The test to this system proves that this design can successfully simulate the real network environment and can be used in network security analysis.

关 键 词：虚拟蜜罐 网络扫描 虚拟网络 主动协议栈指纹识别 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]