蜜网中数据分析的研究与实现——以Swatch软件为案例说明

Research and Implementation on Honeynet Data Analyse

蜜网技术是由蜜网项目组(The Honeynet Project)提出并倡导的一种对攻击进行捕获和分析的新技术.蜜网的关键技术包括数据控制、数据捕获、数据分析.Swatch软件是日志分析软件,能定期地扫描日志文件,实现蜜网中的数据分析.

Honeynet brought forward by The Honeynet Project is a new technology to capture and analyze attack. The key technology of Honeynet contains data capture , data control, data analyse. The software of Swatch can scan and analyze log in the Honeynet regularly.