一种基于合作博弈的分布式蜜罐部署策略

A Distributed Honeypot Deployment Strategy Based on Cooperative Game

针对分布式蜜罐存在大量资源浪费和数据处理效率低下的问题,提出一种基于合作博弈的分布式蜜罐部署策略。该策略将合作博弈与分布式蜜罐技术相结合,加入聚类分流技术用于数据处理,在考虑多种影响因素的情况下结合需求进行资源分配,在充分利用系统资源的前提下最大程度地提升蜜罐收益并优化其系统性能。对该策略和两个对照组策略进行72h的测试,实验结果表明,该部署策略可根据需求将蜜罐收益最大化后进行分配,相较于单一部署策略差错率降低了12.29%,系统资源损耗率降低了7.5%、数据处理时间缩短了59.22%。

Aiming at the problems of large waste of resources and low efficiency of data processing in distributed honeypot,a distributed honeypot deployment strategy based on cooperative game is proposed. The cooperative game and distributed honeypot technology are combined,and the clustering and shunting technology is added for data processing. Considering a variety of influencing factors,the resource allocation is carried out in combination with the demand,On the premise of making full use of system resources,maximize the income of honeypot and optimize the performance of honeypot system. The model and two control groups were tested for 72 hours. The experimental results show that the deployment strategy can maximize the honeypot revenue according to the demand and allocate it. Compared with the single deployment strategy,the experimental results reduce the error rate by 12.29%,the system resource loss rate by 7.5% and the data processing time by 59.22%.