一种高效的低成本内网蜜罐系统部署方案

蜜罐是一种安全资源,其价值在于被探测、攻击和损害,无论是实系统蜜罐还是伪系统蜜罐,传统的蜜罐部署方式都存在部署成本高、部署效率低的问题。文中通过融合防火墙安全域配置策略、IP地址NAT技术、终端探测技术、二层协议栈分析技术等,为企业网络提供了一种切实可行的低成本并能快速和大范围部署的蜜罐系统部署方案,其具有高感知能力,解决了传统蜜罐部署成本高、效率低、安全关联风险大的问题,对于促进蜜罐系统大范围推广部署具有积极的意义。

Efficient and Low Cost Intranet Honeypot System Deployment Scheme

Honeypot is a security resource. Its value lies in being detected, attacked and damaged. Whether it is a real system honeypot or a pseudo system honeypot, traditional honeypot deployment methods have the problems of high deployment cost and low deployment efficiency. This paper combines firewall security domain configuration strategy, IP address NAT technology, terminal detection technology, and two-layer protocol stack analysis technology, to provide a feasible and low-cost honeypot system deployment solution for the enterprise network, it can not only be deployed at a low cost and in a large scale quickly, but also has a high perception ability. It is very important to solve the problems of high cost, low efficiency, and high security related risk of traditional honeypot system deployment, and promote the large-scale deployment of honeypot system.