利用蜜罐技术捕捉来自内部的威胁

How to Use Honeypots to Catch the Insider Threats

近几年来人们对蜜罐技术进行了广泛的研究,但对蜜罐的研究主要集中在对来自网络外部威胁的检测与信息收集,很少有利用蜜罐对来自内网的威胁研究。本文论述了如何利用蜜罐技术来检测、标识及收集来自内部威胁的信息。

In the past several years there has been extensive research into honeypot technologies, but the researchmainly focus detection and information gathering against external threats. However, there is little research into themost dangerous insider threats. This presentation discusses how honeypot technologies can be used to detect,identify, and gather information on the insider threats.