基于蜜罐技术的局域网安全防御系统设计  

Design of LAN security defense system based on honeypot technology

作　　者：刘永辉 胡巧婕 赵丽[3] LIU Yonghui;HU Qiaojie;ZHAO Li(Information Management Office,Xinjiang Changji TV and Radio University,Changji 831100,China;Student Management Office,Xinjiang Changji TV and Radio University,Changji 831100,China;Information Technology Branch,Xinjiang Agricultural Vocational Technical College,Changji 831100,China)

机构地区：[1]新疆昌吉广播电视大学信息管理处,新疆昌吉831100 [2]新疆昌吉广播电视大学学生管理处,新疆昌吉831100 [3]新疆农业职业技术学院信息技术分院,新疆昌吉831100

出　　处：《电子设计工程》2022年第14期68-72,共5页Electronic Design Engineering

基　　金：新疆省教育厅高等职业院校创新和发展教学改革项目(XJ16-006)。

摘　　要：针对现有网络安全防护系统采用被动式防御,无法快速对未知的攻击手段作出有效响应且防御能力差等问题,设计开发了一套基于蜜罐技术的局域网安全防御系统。该系统通过其部署的蜜罐诱导攻击者的入侵方向,捕获攻击者与网络服务器中的漏洞信息。同时,利用访问控制模块约束攻击者的访问权限,并提高局域网的安全防御能力。该系统测试与实验结果说明,部署该系统的局域网在遭受非法入侵时,能够准确记录入侵主机的异常访问信息及网络活动信息,便于管理员的后续分析处理。通过对比实验充分验证了系统的有效性与可靠性。In view of the existing network security protection system using passive defense,unable to quickly respond to the unknown means of attack,poor defense ability and other problems,designs and develops a set of local area network security defense system based on honeypot technology.The honeypot deployed in the system can induce the attacker’s invasion direction and capture the vulnerability information of the attacker and the network server.At the same time,the access control module is used to restrict the attacker’s access rights,so as to improve the security defense ability of LAN.The system test results show that the computer LAN deployed the system designed in this paper can record the abnormal access information and network activity information of the intrusion host in detail and accurately when suffering from illegal intrusion,so as to facilitate the subsequent analysis and processing of the network administrator.The effectiveness and reliability of the system are fully verified by the comparative test.

关 键 词：蜜罐技术 数据捕获 访问控制 局域网 安全防御 

分 类 号：TN915.6[电子电信—通信与信息系统]