基于蜜罐技术的网络入侵研究

蜜罐是近几年发展起来的一种主动防御安全技术。文章首先综述了当前网络安全技术的应用和不足，分析了蜜罐技术的研究现状。提出了一个SNIBH入侵检测模型，设计并实现了数据捕获及分析等基本功能。分析收集的入侵者信息，从中提取入侵特征，以便提高入侵检测能力，使被动防御体系向主动的防御系统转化。

Network Intrusion Based on Honeypot Technology

Honeypot, developed in recent years, is an active defense security technology. The paper provides an overview on applications and shortcomings of the current network security technology, and analyzes the current research situation of honeypot technology. Then, this paper proposes an intrusion detection model SNIBH, describes the design and implementation of such fundamental functions as data capture and analysis, etc.. The intrusion signatures are extracted from the acquired attacker information, thus to improve the intrusion detection capability in network intrusion detection and turns the passive defense system into an active defense system.