陷阱网络系统中入侵定位的研究

Research on Intrusion Locating for Honeypot System

在分析陷阱网络密钥不足和黑客隐藏IP的手段基础上,提出了改进陷阱网络模型的方法。在陷阱网络系统中增加入侵定位模块、置入入侵定位程序。该程序先检测入侵黑客,定向到陷阱系统,并自动加载IP定位程序到黑客电脑,将黑客IP地址等信息直接发送到日志代理服务器,解决密钥失效问题。

On the basis of analysing the defectiveness of honeypot network and the way of hiding real IP address, an improved honeypot network model is introduced. Intrusion locating detection module and intrusion locating program was added in honeypot network system. Intrusion hacker is tested and located with intrusion locating program, redirecting it to honeypot system, and automatically loads IP address locating program to PC of the hacker. It's aimed at resolving encryption key problem by sending hacker's IP address directly to logging proxy server.