基于内生安全体系结构的蜜罐技术研究

为增强蜜罐对未知漏洞、未知后门、未知攻击的防范能力,提高蜜罐的动态性、数据搜集能力、诱捕能力和溯源能力,基于内生安全体系结构,将其与蜜罐技术紧密结合,提出了一种能够主动防御兼诱捕的内生安全蜜罐模型。该模型利用内生安全动态、异构、冗余的特性解决蜜罐的安全性问题,利用内生安全特有的感知能力提高蜜罐的诱捕性和溯源性。最终理论分析和实验结果也表明,内生安全蜜罐在安全性、诱捕能力和溯源能力上都有明显提升。

Research on honeypot based on endogenous safety and security architecture

To enhance the honeypot''s prevention ability against unknown vulnerabilities, unknown backdoors, and unknown attacks, improve the dynamics, data collection, trapping, and traceability of honeypots, this paper proposed an endogenous safety and security honeypot model that could actively defend and trap based on the endogenous safety and security architecture, which was closely combined with honeypot technology. This model used the endogenous safety and security characteristics of "dynamic, heterogeneous, redundant" to solve the problem of the safety of the honeypot and used endogenous safety and security special awareness to improve the honeypot trap and traceability. The final theoretical analysis and experimental results show that the endogenous safety and security honeypot has significantly improved in security, trapping ability, and traceability.