基于入侵诱骗的网络动态防御研究

网络攻击的目标可以归纳为目标端的数据资源、计算资源及连接资源．为抵御以数据资源为目标的攻击，文章提出一种基于入侵诱骗的网络动态防御系统；以形式化方法描述并论证了该系统的网络动态防御能力；提出了通过分析行为操作序列判断行为性质的方法；最后给出了该系统的原型及其实现．

Research on Intrusion-Deception-Based Dynamic Network Defense

The targets of net attacks can be summed up to data resources, computational resources and connection resources. To against net attack, which focuses on data resource, an intrusion-deception-based dynamic network defensive system is presented in this paper. Authors formalized describe intrusion deception system and demonstrate the dynamic defensive abilities of the intrusion deception system. This paper proposes a method of behavior analysis and judging operation properties. It also presents prototype and implementation of intrusion deception system.