基于遗传算法的蜜罐系统

Trap System Based on Generic Algorithm

入侵诱骗系统作为一种网络安全工具,其价值在于被扫描、攻击和入侵时,通过创建一个高度可控的攻击环境,从而捕获尽可能多的入侵信息。基于这些信息,分析入侵行为,预防更多的恶意破坏,从而更有效的保护网络。介绍一种基于遗传算法的蜜罐系统,其关键技术包括隐蔽的数据捕捉和基于遗传算法的行为分析技术。实验证明,该系统能有效捕捉恶意行为,防御多种新型攻击。

Intrusion deception system is one kind network safety method. When a system is intruded,it can set a controllable attack circumstance, so it can capture intrusion information as much as possible. Based on these information, we can analyze intrusion action, and prevent farther hostility destroy, there fore we can protect network more effectively. This paper introduces a kind of trap system based on generic algorithm, whose key technologies include hidden data catch technology and behavior analysis technology based on generic algorithm. Experiments prove the system can capture hostility behavior, and defense some new attacks.