基于入侵诱骗技术的网络安全研究与实现

Research on Network Security Based on Intrusion Detection and Deception Technique

介绍了基于诱骗技术的网络入侵检测系统(IDS),它是传统入侵检测系统的延伸。首先讨论了基于网络和基于主机的入侵检测系统,然后分析了入侵诱骗技术和Honeypot技术,最后讨论了基于诱骗技术的入侵检测系统的设计和实现,特别是重定向模块和诱骗网络的设计和实现。

This paper introduces Intrusion Detection System (IDS) based-on deception technique.First,we describe the intrusion detection.Then we analyze the techniques of intrusion and honeypot.Finally,we discuss design and implementation of an IDS using deception technique,particularly for the redirection and deception modules.