主动型安全防护措施-陷阱网络的研究与设计

Study and Design of the Proactive Security Protecting Measure－Honeynet

介绍了陷阱网络的设计、实现及关键技术，提出了一个陷阱网络的模型。分析与模拟结果表明：陷阱网络能实现Windows、Linux、Solaris操作系统及FTP、telnet、WWW等网络基本服务的模拟，可与防火墙、入侵检测系统联动，实现对入侵行为的主动引入及对入侵过程的记录和监控。

This article introduces the structure, implementation and several key technologies of honeynet, and presents a model of honeynet. Results and analysis show that honeynet has ability to simulate the operating systems such as Windows, Linux, Solaris and the basic network services like FTP,Telnet, WWW, etc. , and by cooperating with firewall and IDS, finally completes to trap attack, records and monitors the whole process of attack.