摘要
随着网络技术的不断发展,网络安全技术已经从早期对攻击和病毒的被动防御开始向对攻击者进行欺骗并且对其入侵行为进行监测的方向发展。基于蜜罐技术的网络安全系统可以实现对内部网络和信息的保护,并且可以对攻击行为进行分析和取证。文中对蜜罐系统分类特点、部署位置以及配置数量进行了分析,同时对蜜罐系统中关键部分取证服务器的实现进行了研究,并进行了实验测试,测试结果表明该蜜罐系统可以实现对攻击行为进行捕捉和记录的功能。对蜜罐系统的部署和保护模式进行研究,可以从理论上优化蜜罐系统的配置和部署,具有很高的实践意义。
With the continuous development of network technology the network security technology develops from the early passive defense of attacks and viruses towards the direction of deception of attacker and monitoring of intrusion behavior. The network security system based on honeypot technology can protect the internal network and？information and analyze and take the evidence of attack behavior. This paper analyzes the classification characteristics, deployment location and allocation number of honeypot system, studies the implementation of key part of evidence server in honeypot system, and carries out the experimental testing. The testing results show that the honeypot system can implment the capture and record functions of attack behavior. The research on deployment and protected mode of honeypot system can theoretically optimize the configuration and deployment of honeypot system, and has high practical significance.
出处
《计算机与网络》
2014年第17期69-72,共4页
Computer & Network
关键词
蜜罐技术
网络欺骗
网络安全
入侵检测
交互性分析
honeypot technology
network spoofing
network security
intrusion detection
interactivity analysis
