基于NDIS的网络诱骗技术的原理及实现

The principle and realization of network trap technology based on NDIS

网络诱骗技术是对传统网络防御手段的有效补充,通过将网络攻击者引向伪造的、虚假的信息资源,达到保护网络中真正有价值信息资源的目的.本文介绍了网络诱骗技术的原理,并利用NDIS底层驱动来实现网络数据包的截获,防范外部对本地主机的入侵,为发现攻击和阻断攻击也提供了相应的工具和技术.

Network trap, which protects the valuable resource of information by guiding the attacker to imitative and illusive information, is an available makeup of traditional network defense. The article introduces the principle of network trap, and keeps away the inbreak from host computer by realizing the intercept and capture using the bottom drive of NDIS, at the same time, provides according tool and technology to find attack and interdiction.