基于蜜网的计算机网络信息安全自主防御体系设计与实现  

Design and Implementation of Computer Network Information Security Autonomous Defense System Based on Honeynet

作　　者：赵劲强 何庭钦 阳锋 李韬 Zhao Jinqiang;He Tingqin;Yang Feng;Li Tao(Hunan University of Science and Technology Network Information Center,Xiangtan,China)

机构地区：[1]湖南科技大学网络信息中心,湖南湘潭

出　　处：《科学技术创新》2024年第13期77-80,共4页Scientific and Technological Innovation

摘　　要：本文探究了基于蜜网的计算机网络信息安全自主防御体系的设计要点,并介绍了反馈响应功能的实现方法。自主防御体系的核心部分包括蜜罐、数据捕获与控制、反馈响应与日志等,在实时捕捉和分析数据流的基础上,判断有无攻击行为。如果攻击者进入蜜网,则自主完成启动防火墙、重定向和配置更新等策略,并通过实时报警提醒安全人员对攻击行为做进一步的处理。同时,利用蜜网追溯攻击者信息,锁定攻击者的网络地址,方便进行责任追究。This paper probes into the design key points of computer network information security autonomous defense system based on honeynet,and introduces the realization method of feedback response function.The core parts of the autonomous defense system include honeypot,data capture and control,feedback response and log,etc.,on the basis of real-time capture and analysis of data flow,to determine whether there is an attack.If the attacker enters the honey network,it automatically completes the strategy of starting the firewall,redirection and configuration update,and reminds the security personnel to do further processing of the attack behavior through real-time alarm.At the same time,the honeynet is used to trace the information of the attacker,lock the network address of the attacker,and facilitate accountability.

关 键 词：网络信息安全 蜜网 自主防御体系 SQL数据库 

分 类 号：TP393[自动化与计算机技术—计算机应用技术] TP311.1[自动化与计算机技术—计算机科学与技术]