蜜罐技术在教育机构信息安全建设中的应用研究

Research on the Application of Honeypot Technology in Building Information Security in Educational Institutions

随着《网络安全法》的实施,网络安全越来越受到重视,各教育机构部署了大量的互联网应用,如何高效、准确的检查出网络恶意代码和防御通过系统漏洞进行的攻击,提升自身安全防御能力是非常关键的。文章从网络安全实际工作出发,结合教育类事业单位的业务特点,提出利用蜜罐技术捕获网络攻击,提高主动防御能力。设计并部署了一套蜜罐系统,能有效分析攻击者的IP地址,利用防火墙对其进行阻断,保证网络应用系统的安全,证明了该方案的有效性。

With the implementation of the network security law,more and more focus has placed on to network security.Various educational institutions have deployed a large number of Internet applications.It is very critical to effectively and accurately check out network malicious code and defend against attacks through system vulnerabilities,so as to improve their own security defense ability.Starting from the actual work of network security and combined with the business characteristics of educational institutions,this paper proposes to use honeypot technology to capture network attacks and improve the ability of active defense.A honeypot system is designed and deployed,which can effectively analyze the attacker's IP address,block it with firewall,ensure the security of network application system.Hence,it proves the effectiveness of the scheme.