分布式蜜罐系统的设计与实现

针对目前的网络安全形势和攻击行为,诸如防火墙等被动防御的工具已经不能满足人们对网络安全服务的需求.蜜罐是一种主动防御的工具,利用蜜罐容易被入侵者攻击的特点以及被入侵的信息来准确的对网络安全行为进行分析,从而设计适当的防御方案,是一种很有效的网络安全手段.在设置蜜罐的基础上提出一种分布式蜜罐技术,针对不同的系统建立不同平台的蜜罐,从而形成一个交互的体系,全面反馈网络真实信息,可以有效降低系统的误报率和漏报率.

Design and implementation of distributed honeypot system

Aimed at the actual security situation and attack mode,such as firewall,is a tool of passive defense,which can not meet the need of network security service people wish.Honeypot is a tool of active defense,so it is a quite effective network security method that appropriate defense are designed by analyzing network security behavior accurately,which obtains characteristics and information of being attacked honeypot easily.A kind of technique of distributed honeypot on the basis of honeypot setting which set up different honeypot of flat roof aimed at different systems,and then a mutual system is formed which roundly feeds back the real network informa-tion,as a result,it reduces the false alarm rate and the leak alarm rate of system effectively.