基于蜜罐的网络防御模型的研究与设计
首发时间:2017-10-20
摘要:随着网络技术的迅速发展和互联网的广泛应用,网络的安全问题日趋严重。传统的入侵检测系统只能被动防御,并且存在漏报率和误报率高的问题。蜜罐技术可以进行主动防御,故而将蜜罐引入到入侵检测系统中,能够有效的解决该问题。本文介绍了入侵检测系统、蜜罐技术的概念和关键技术以及相关的开源工具,并在已有的研究成果的基础上,引入虚拟机技术和数据挖掘技术,提出了一种新的基于蜜罐的网络防御模型设计方案。此方案明确了该模型的设计思想和主要模块的功能,并在虚拟平台上成功搭建该网络防御模型。
For information in English, please click here
The Study and Design of Intrusion Detection Model Based on Honeypot
Abstract:With the rapid development of network technology and the wide application of Internet, network security is becoming more and more serious. The traditional intrusion detection system can only be passive defense, and has the problem of high missing rate and high false positive rate. Honeypot technology can be used for active defense, so honeypot is introduced into intrusion detection system, which can solve this problem effectively. This paper introduces the concept and key technology of intrusion detection system, honeypot technology and open source tools, and on the basis of the existing research, the introduction of virtual machine technology and data mining technology, puts forward a new design scheme ofnetwork defense model based on honeypot. The design concept of the model and the function of the main modules are clarified, and the network defense model is successfully constructed on the virtual platform.
Keywords: Computer application Network Security Intrusion detection Honeypot
基金:
引用
No.****
同行评议
共计0人参与
勘误表
基于蜜罐的网络防御模型的研究与设计
评论
全部评论0/1000