基于Honeyd的网络恶意软件漏洞动态检测系统  

Honeyd based dynamic detection system for network malware vulnerability

作　　者：王健 毕凯峰 WANG Jian;BI Kai-feng(China Southern Power Grid Digital Power Grid Research Institute Co.,Ltd.,Guangzhou 510000,China)

机构地区：[1]南方电网数字电网研究院有限公司,广州510000

出　　处：《信息技术》2023年第11期62-67,共6页Information Technology

基　　金：中国南方电网有限责任公司科技资助项目(ZBKJXM-20190077)。

摘　　要：针对目前系统在对网络恶意软件漏洞进行检测时,存在拟合效果和检测效果差的问题,设计基于Honeyd的网络恶意软件漏洞动态检测系统,其系统硬件由网络爬虫、任务管理和相关检测三个模块组成,软件部分由基于Linux的Honeyd实现,通过生成的虚拟蜜罐接收全部恶意攻击,对攻击行为进行处理,完成网络恶意软件漏洞的动态检测。实验结果表明,所设计系统能够有效提高拟合效果和检测效果。To solve the problem of poor fitting effect and detection effect when detecting network malware vulnerabilities,a Honeyd based dynamic detection system for network malware vulnerability is designed.The hardware of the system is composed of three modules,including web crawler,task management and related detection,while the software part is realized by Honeyd based on Linux.All malicious attacks are received through the generated virtual honeypot,and the attack behavior is processed to complete the dynamic detection of network malware vulnerabilities.The experiment results show that the designed system can effectively improve the fitting effect and detection effect.

关 键 词：HONEYD 网络恶意软件漏洞 动态检测系统 网络爬虫 特征引擎 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]