蜜罐诱骗防御机理的博弈理论分析

A Game Theoretic Analysis for the Honeypot Deceptive Mechanism

论文运用博弈理论形式化描述了蜜罐诱骗中各博弈局中人的策略与收益,通过求解博弈均衡策略及均衡条件,分析推理了传统蜜罐在网络攻防博弈中的有效性和局限性,证明了蜜罐是一种"被动式主动"防御手段。讨论了符合防御者预期的理想诱骗博弈均衡策略,剖析了影响诱骗博弈有效性和主动性的要素条件,并受生物拟态现象启发,给出了提高诱骗主动性和有效性的策略建议,为构建主动有效的蜜罐诱骗防御手段提供了理论支持。

A game-theoretic analysis is performed to acquire the equilibrium strategies and their precondition by formalizing the strategies and payoffs of players in the honeypot game.The effectiveness and the deficiency of honeypot are inferred for network confrontation game,which demonstrate that honeypot is a passive-proactive defense mechanism.The ideal equilibrium combined strategy for defender and the factor affecting the effectiveness and activeness are discussed in detail.Inspired by the mimicry phenomena in biological competition,the propositional methods are given to enhance the deception performance for honeypot.The work is a theoretical support for the effective and proactive tactics of honeypot.