基于Xen硬件虚拟机的虚拟蜜网研究

Study on Virtual Honeynet with Xen Hardware Virtual Machine

虚拟蜜网由于其强大的捕捉和发现功能,以及相对低廉的成本,被网络管理员广泛的使用。然而,其隐秘性相对较差,容易被比较谨慎的攻击者发现甚至反利用。文章基于Xen虚拟机这一开源虚拟机,提出了一种在硬件虚拟机上架构蜜网的方法,以提高攻击者探测发现虚拟蜜网的难度。

Virtual Honeynet is acquires widespread acceptance and deployment due to its cost efficiency and relatively powerful feature set. However, its invisibility is often a questionable matter and, it is easy to be discovered and exploited. This paper presents a novel way for building virtual honeynet based on Xen virtual machine monitor, thus to considerably improve the invisibility and raise the difficulty for attackers to discover.