基于双层动态蜜罐技术的智能交通网络主动防御方案

Active defense scheme of intelligent transportation system based on double dynamic honeypot technology

针对智能交通网络恶意入侵系统不断升级、手段层出不穷、更新周期不断缩短以及传统防御手段对未知入侵或其变种无能为力的现状,通过分析智能交通系统的安全问题和特点,借鉴FSM主动防御系统模型和P2DR自适应网络安全模型的优势,提出一种基于双层动态蜜罐技术的智能交通系统主动防御方案。该方案分层布设产品型和研究型蜜罐,产品型蜜罐拦截包括未知入侵或者其变种的入侵,并将其转入研究型蜜罐;研究型蜜罐对入侵进行分析,提取攻击源信息,从而实现保护智能交通系统网络及为公安机关提供入侵违法犯罪证据的目的。

For the existing problems, such as malicious intrusion against intelligent transportation network system escalates, intrusion methods continuously upgrade, update cycle becomes shorter, and the traditional defense methods are based on known invasive species, but they can＇ t process the unknown intrusion or its variants, and so on, this paper through the analysis of ITS security problems and characteristics, draw lessons from FSM active defense system model and P2DR adaptive network security model, based on the advantages, put forward an active defense scheme of intelligent transportation system based on the double dynamic honeypot technology. This scheme hierarchically arranged product type honeypot and research type honeypot. Product type honeypot headed off unknown intrusion or its variants, and converted it to research type honeypot. Research type honeypot analyzed the intrusion, extracted attack source information, thus realized to protect ITS network and provided evidences of invasion crime.