蜜罐识别与反识别技术研究

The Research of Honeypot Recognition and Anti-recognition Technology

随着蜜罐技术的发展和应用,攻击者针对蜜罐的研究也越来越多,主要集中在蜜罐的识别技术上。一旦入侵者确定入侵对象是个蜜罐,那么蜜罐就失去了部署的意义。主要讨论了几种蜜罐识别技术并提出了相应的防御措施,并对蜜罐的发展趋势提出自己的看法。

With the development and the application of honeypot technology, the attackers are also do more and more research aim at the honeypot , mainly concentrates in the honeypot recognition technology. Once the attacker made sure that the inbreak object is an honeypot, then the honeypot has lost it’s significance. This paper mainly discussed several kind of honeypot recognition technology and advanced the corresponding defensive measures, and put forwarded own view about the development trend of honeypot.