基于蜜网的网络监测系统的设计与实现

文章针对网络入侵、网络欺骗、网上垃圾等恶意网络行为对网络安全的负面影响日益增加，网络行为识别已经成为网络安全的重要组成部分这一现象。文章提出了基于蜜网技术构建网络监测系统，有效利用了蜜网系统的沙箱执行、特征模拟、日志审计和重定向代理的机制，解决了被动监测基础上的数学模型难以有效描述网络恶意行为的问题，在实际运行中取得较好的效果，

The Design and Implementation of a Honey-net Based Monitoring System

Malicious network behavior such as network instruction, network cheating and network garbage adds more negative impaction on network security. Network behavior distinguish is now an important composition of network security. In this article, a honey-net based network monitoring system is introduced, which exploit the merits of a honey-net such as sandbox-execution, characteristic-imitation, log-auditing and redirection-proxy. The system resolves the problems in describing malicious network behavior and gets good result in operation.