校园网部署虚拟蜜罐的关键点研究  

Research on the Key Point of Deploying Virtual Honeypot in Campus Network

作　　者：黄旭鹏 钟平 HUANG Xu-peng;ZHONG Ping(College of computer and Information Engineering, Hanshan Normal University, Chaozhou 521041;Network and Education Technology Center, Hanshan Normal University, Chaozhou 521041)

机构地区：[1]韩山师范学院计算机与信息工程学院,潮州521041 [2]韩山师范学院网络与教育技术中心,潮州521041

出　　处：《现代计算机（中旬刊）》2018年第2期73-77,82,共6页Modern Computer

基　　金：韩山师范学院青年项目(No.LQ201305)

摘　　要：蜜罐是一种主动防御技术,安全人员将精心配置好的蜜罐故意暴露在网络中,诱骗非法入侵者对其进行非法使用,从而对入侵行为进行记录和分析,了解入侵者所用工具及方法,推测其意图和动机。通过对蜜罐部署关键问题的研究,将虚拟蜜罐技术引入校园网安全防护体系,设计一套适合校园网自身特点的解决方案,使校园网具备主动防御的能力。Honeypot is a kind of active defense technology, security officer will be configured honeypot carefully and deliberately exposed it in the net- work for intruders, so as to record and analyze the intrusion behavior, using tools, it is the methods for understanding intention and motivation of intruders. Studies the key problems about Honeypot technology and then uses it to build up the campus network security system. Designs a set of solutions according to the features of the campus network. In the resuh, the active defense capability of the campus network is getting stronger.

关 键 词：虚拟蜜网 蜜罐 HONEYD 主动防御 网络安全 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]