虚拟蜜罐技术在网络安全中的应用研究

Study on the Application of Virtual Honey-pot Technology to Network Security

面对网络上复杂而多变的黑客攻击,提出利用虚拟蜜罐技术主动吸引黑客的攻击,来监视和跟踪入侵者的行为并进行记录,进而研究入侵者所使用的攻击工具、攻击策略和方法。笔者论述了虚拟蜜罐技术的基本概念,通过3方面的应用实例,较为系统地研究了虚拟蜜罐技术在网络安全中的应用,证明虚拟蜜罐技术可以有效收集攻击信息,保护实际工作网络,并讨论了虚拟蜜罐的优点和风险。

Aiming at various complex and flexible Hacker＇ network attacks, an effective method is presented, in which the Virtual Honey-pot Technology is used to actively attract attacks, monitor and track attackers, and record the relevant actions so that the attacking tools and tactics used by the intruders can be analyzed and studied. Firstly, the basic definition of Virtual Honey-pot Technology is introduced. Then, the applications of Virtual Honey-pot Technology to network security are systematically studied with three aspects of applied instances, which proves that the Virtual Honey-pot Technology can effectively gather information about attacks and protect the real network. Finally, the advantages and the risks of Virtual Honey -pot Technology are discussed.