基于欺骗式防御理念的高甜度春秋云阵蜜罐系统

High Sweetness Spring and Autumn Cloud Array Honeypot System based on Deceptive Defense Concept

基于欺骗式防御理念,运用平行仿真技术构建而成的蜜罐系统,具备高甜度诱捕、零误报发现、高处置防御的价值能力,为防御体系构建了一个全新的优势维度。通过构造与现实网络系统相对应的场景和访问环境,综合利用虚拟化、云计算、大数据分析、攻防对抗、行为仿真等技术,研发能够进行细粒度场景仿真、支持资源虚实结合、能够模拟仿真各类高逼真的典型网络场景,对攻击者具有强烈诱导和欺骗能力,在攻击者不知情的情况下发现其攻击行为并留存攻击证据,形成了比传统检测体系更强的主动防御能力。

Based on the concept of deceptive defense,the honeypot system constructed using parallel simulation technology has the value capabilities of high sweetness trapping,zero false alarm detection,and high disposal defense,and has built a new advantage dimension for the defense system.By constructing the scene and access environment corresponding to the real network system,and comprehensively using virtualization,cloud computing,big data analysis,offensive and defensive confrontation,behavior simulation and other technologies,research and development can carry out fine-grained scene simulation,support the combination of virtual and real resources,and be able to simulate simulation Various types of high-fidelity typical network scenarios have a strong ability to induce and deceive attackers,discover their attack behaviors and retain attack evidence without their knowledge,forming a stronger active defense capability than traditional detection systems.