网络与信息安全学报 ›› 2018, Vol. 4 ›› Issue (1): 57-62.doi: 10.11959/j.issn.2096-109x.2018006

• 学术论文 • 上一篇    下一篇

基于蜜罐的主动防御应用研究

杨德全(),刘卫民,俞宙   

  1. 北京理工大学网络信息技术中心,北京 100081
  • 修回日期:2018-01-04 出版日期:2018-01-01 发布日期:2018-02-09
  • 作者简介:杨德全(1980-),男,山西应县人,博士,北京理工大学助理研究员,主要研究方向为网络应用安全、安全审计。|刘卫民(1976-),男,山西太原人,北京理工大学工程师,主要研究方向为计算机网络和无线网络。|俞宙(1969-),男,浙江兰溪人,北京理工大学副研究员,主要研究方向为网络与信息安全。
  • 基金资助:
    国家重点研究计划基金资助项目(2017YFF0207400)

Research on active defense application based on honeypot

Dequan YANG(),Weimin LIU,Zhou YU   

  1. Network Information Technology Center,Beijing Institute of Technology,Beijing 100081,China
  • Revised:2018-01-04 Online:2018-01-01 Published:2018-02-09
  • Supported by:
    The National Key Research and Development Program of China(2017YFF0207400)

摘要:

随着金融信息化的蓬勃发展,针对金融系统的网络攻击事件也大量增长。主动防御对提高专用网络的防御水平有着重要的作用。如何快速有效的部署和应用蜜罐捕获攻击行为,分析攻击意图,提高攻击门槛是保障专网安全的关键所在。本文从主动防御的角度出发,分析了蜜罐的主动防御优势,设计了将主动防御和被动防御整合的防御生态链,并在专网内建立了蜜罐实验环境,结果表明,主动防御技术可以有效提高攻击者的攻击门槛,从而提高整体网络的安全等级。

关键词: 网络安全, 蜜罐, 主动防御, 防御生态链

Abstract:

Abstract:With the rapid development of financial information technology,cyber security events on the financial system have also increased greatly.Active defense plays an important role in improving the defense level of defined private network.How to quickly and effectively deploy and apply honeypot to capture and attack behavior,analyze the attack intention and raise the threshold of attack is the key to ensure the security of the defined private network.From the perspective of active defense,the advantage of honeypot active defense was analyzed,an active defense and defense filling passive defense integration was designed,and a honeypot within private network experimental environment was set up,the results show that the active defense technology can effectively improve the threshold of the attacker's attack,so as to improve the security level of the whole network.

Key words: cyber security, honeypot, active defense, defensive ecological chain

中图分类号: 

No Suggested Reading articles found!