基于Cowrie蜜罐系统的机房网络主动诱捕技术应用研究  

Application research of active capture technology for computer room networks based on Cowrie honeypot system

作　　者：赵仲力 李庆 ZHAO Zhongli;LI Qing(Tianjin Baodi District Public Emergency Warning Information Release Center,Tianjin 301800,China;Tianjin weather modification office in Jinnan District,Tianjin 300350,China)

机构地区：[1]天津市宝坻区突发公共事件预警信息发布中心,天津301800 [2]天津市津南区人工影响天气办公室,天津300350

出　　处：《无线互联科技》2024年第15期117-119,共3页Wireless Internet Science and Technology

摘　　要：随着网络攻击日益频发、隐蔽和复杂,传统的被动防御手段难以及时、有效地识别新型威胁。文章介绍了Cowrie蜜罐的基本原理和实现机制,阐述了机房网络主动诱捕的系统架构设计,具体论述了蜜罐部署、数据收集和分析等核心部分,最后基于实验测试环境验证了该系统捕获攻击行为的有效性。With the increasing frequency,stealth,and complexity of network attacks,traditional passive defense methods struggle to identify new threats in a timely and effective manner.Firstly,the basic principles and implementation mechanisms of Cowrie honeypots are introduced.Next,the system architecture design for active capture in computer room networks is elaborated,specifically discussing the core components of honeypot deployment,data collection,and analysis.Finally,the effectiveness and real-time performance of the system in capturing attack behaviors are validated based on an experimental test environment.

关 键 词：机房网络安全 主动诱捕 Cowrie 交互式蜜罐 

分 类 号：TN915.08[电子电信—通信与信息系统]