基于Libpcap的低交互Honeypot诱捕蜜罐的研究与设计

随着计算机网络中攻击风险日益严峻,安全系统面对威胁必须迅速反应以减少损失.提出一种在主动网络防御体系中的Honeypot诱捕蜜罐方案,采用Libpcap底层信包捕获及套接字编程,在Linux平台上研究、设计实现一种模拟一定数量特定服务的低交互Honeypot诱捕蜜罐,实现对自动扫描、病毒等攻击的诱捕,弥补了传统防火墙和入侵检测系统的不足,以尽早发现潜在攻击,提高网络安全性,有效保护网络资源安全.

RESEARCH AND DESIGN OF LOW INTERACTIVE HONEYPOT TRAP BASED ON LIBPCAP

With the sharp rise of attacks in computer network,security system must quickly react to impending threats in order to mitigate damages.This paper introduces a Honeypot trap scheme in active network defense system,which employed the bottom packet capture packages of Libpcap and socket programming,designed and realized on Linux platform a low interactive Honeypot trap simulating some specific services to trap the attacks such as autoscan,viruses,etc.The scheme has made up the deficiency of traditional firewa...