Openflow下的动态虚拟蜜网系统  

A Dynamic Virtual Honeynet System Using Openflow

作　　者：胡毅勋 郑康锋[1] 武斌[1] 杨义先[1] 

机构地区：[1]北京邮电大学信息安全中心,北京100876

出　　处：《北京邮电大学学报》2015年第6期104-108,119,共6页Journal of Beijing University of Posts and Telecommunications

基　　金：国家自然科学基金项目(61101108)

摘　　要：提出了一种Openflow下的动态虚拟蜜网系统,利用Openflow交换机及其控制器的软件定义网络的新型网络架构,解决现有蜜网系统中流量控制困难的问题,替代现有基于重定向网关的半软件半硬件的转发方案.设计了一种虚拟蜜罐系统,可以虚拟运行任意服务的任意主机,能够动态调整蜜罐结构.提出了叠加虚拟蜜网的概念,在一个蜜网物理实体中叠加运行多个不同的虚拟蜜网系统.部署设计的蜜网系统验证了密网系统转发时延低、动态性强的特性和叠加虚拟蜜网系统的有效性.A dynamic vitual honeynet system using Openflow is proposed to solve the pain point of traffic control in the current honeynet system. This system is established on software defined network architecture with Openflow switch and controller and replaces the existing semi-software forwarding solution which is based on redirection gateway. A virtual honeypot system is designed to virtualize any host with any services and to adjust the honeypot structure dynamically. A new concept of overlay virtual honeynet which defines running multiple virtual honeynets in one honeynet physical entity is advocated. The experimental results in deployed designed honeynet system verify the low forwarding delay of forwarding scheme based on Openflow,dynamic property of honeynet system,and effectiveness of overlay virtual honeynet system.

关 键 词：Openflow 软件定义网络 蜜网 叠加虚拟蜜网 

分 类 号：TN929.53[电子电信—通信与信息系统]