动态虚拟陷阱技术分析与设计

Analysis and design of dynamic virtual trap technique

针对虚拟陷阱网络系统的配置、陷阱网络甜度的增加以及被攻破后防止成为黑客实施进一步入侵的跳板等问题,提出了一种动态虚拟陷阱网络的设计模型,并对它进行了详细分析和设计。该模型主要采用分析通用协议(ICMP)、主动探测和Honeyd技术。分析通用协议(ICMP)是为了采集网络拓扑信息;主动探测采用了基于ICMP数据报的响应指纹判别;利用Honeyd是用于创建虚拟陷阱网络。最后结合这些技术,分析了该模型存在的不足之处和改进措施。

Aimed at the problems as virtual trap system configuration, increase trap network sweetness and the springboard which prevent the barker implement further invading after broken, a design model for dynamic virtual trap network is proposed and analyzed. It mostly applies ICMP, active detection and Honeyd technique, the general protocol （ICMP） can be used in gathering the network topology information; the active detection has used based on the ICMP datagram response fingerprint distinction; Honeyd is used in founding the virtual trap network. Finally, the model existence deficiency and the improvement measure ments are also analyzed.