基于欺骗的网络主动防御技术研究

Research on Active Network Defence Technology Based on Deception

在蜜罐中综合运用各种欺骗技术能达到主动保护网络的目的。准确定义了在网络防御中欺骗的概念,分析了各种欺骗的目的和用途,以及分类和发展过程,并详细阐明了运用在蜜罐上的各种欺骗技术原理,包括指纹信息模拟、随机服务器、重定向、牢笼和虚拟命令等。最后讨论了如何根据不同的欺骗目的综合选择合适的欺骗技术进行欺骗部署。

Honeypots take several deception technology to protect network. This paper will explain actively the deception technology, including it＇s definition,purpose,category and development. It analyzes the principles of most kinds of deception technology,including banner simulation, random server, redirection, cage and virtual command. It discusses how to choose proper deception technology to deploy deception policy baesd on different deception purposes.