一种基于三级内网蜜场系统的网络蠕虫检测技术

Honeyfarm-based Network Worm Detection Technique in Three-tied Intranet

在针对内网的入侵行为中以网络蠕虫危害最大,传统的网络安全手段存在缺陷,蜜场技术作为监测和信息搜集手段与传统网络安全手段的本质不同。研究提出了一种基于三级内网蜜场系统的网络蠕虫检测技术,它可以有效提高蠕虫检测速度,对提高内部网络的安全,具有重要实用意义。

There are many intrusion activities on the intranet in which network worms cause the greatest harm.Traditional network security means have many deficiencies,as a means of monitoring and information gathering,honey field technology is essentially different with traditional network security measures.A network worm detection method based on honeyfarm of three-tied intranet was proposed.With the ability of improving the speed of worm detection,enhancing the security of internal network,it has important practical significance.