基于蜜罐与入侵检测技术的安全云架构方案  

Security cloud infrastructure scheme based on honeypot and intrusion detection technologies

作　　者：杨文茵[1,2] 马莉[1] 周灵[1] 丁伟雄[1] 

机构地区：[1]佛山科学技术学院电子与信息工程学院,广东佛山528000 [2]中南大学信息科学与工程学院,湖南长沙410083

出　　处：《佛山科学技术学院学报（自然科学版）》2015年第6期64-69,共6页Journal of Foshan University(Natural Science Edition)

摘　　要：云计算由于通过因特网提供公共资源般的计算存储服务,而使之暴露于各种网络入侵威胁中。搭建安全云架构以提高云服务的安全性是云安全的首要任务。入侵检测是一种被动防御技术,擅长实时识别已知攻击模式,对未知异常行为的误判率较高。蜜罐是一种主动防御技术,它通过提供虚假信息、系统或网络环境,诱使攻击方实施攻击,从而了解攻击行为并做出相应处理,有利于发现新攻击手段及态势。将入侵检测和蜜罐技术融合到云架构Eucalyptus的方案,可使云端更加安全可靠。Cloud computing services are provided through the Internet, resulting in the exposure to various security threats risk. Secure cloud infrastructure is the primary task for improvement on cloud security. Intrusion detection is a kind of passive defense technology, which is good at real-time recognition of known attack patterns, but it's not skillful in detecting unknown attack patterns. Honeypot is a kind of active defense technology, which provides fake information, system or network environment, alluring the attackers to conduct attacks, then analysis of attack patterns and appropriate reactions could be performed. This paper introduces a scheme for incorporating intrusion detection and honeypot technologies into cloud infrastructure Eucalyptus,which augments the cloud service security and reliability.

关 键 词：云计算 云安全 入侵检测 蜜罐 EUCALYPTUS 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]