基于扩展有限状态机的诱骗服务器关键技术研究

The Study of Network Trap Based on Extended Finite State Machine

作为防火墙和入侵检测的有效补充,诱骗服务器成为网络安全的越来越重要的部分,本文在对当前诱骗服务器的研究水平进行了仔细分析的基础之上,提出了使用有限状态机理论来构建诱骗服务器的方案,并对其中的关键技术做了详细阐述。

As the effective supply of the firewall and IDS, the honeypot become more and more important aspect of network security. Based on our detail research of current honeypot development, the paper gives a scenario of building a practical honeypot by using extended finite state machine. And we also describe the crisis technology that our system used.