Research on active defense application based on honeypot

Dequan YANG; Weimin LIU; Zhou YU

doi:10.11959/j.issn.2096-109x.2018006

您当前的位置：

首页 >

文章列表页 >

Research on active defense application based on honeypot

Papers | 更新时间：2024-06-03

- Research on active defense application based on honeypot
- Chinese Journal of Network and Information Security Vol. 4, Issue 1, Pages: 57-62(2018)
- 作者机构：
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2018006
  CLC： TP393
- Online First：2018-01，
  
  Published：15 January 2018
- 稿件说明：
移动端阅览
Dequan YANG, Weimin LIU, Zhou YU. Research on active defense application based on honeypot[J]. Chinese Journal of Network and Information Security, 2018, 4(1): 57-62.
DOI：

Dequan YANG, Weimin LIU, Zhou YU. Research on active defense application based on honeypot[J]. Chinese Journal of Network and Information Security, 2018, 4(1): 57-62. DOI： 10.11959/j.issn.2096-109x.2018006.

摘要

随着金融信息化的蓬勃发展，针对金融系统的网络攻击事件也大量增长。主动防御对提高专用网络的防御水平有着重要的作用。如何快速有效的部署和应用蜜罐捕获攻击行为，分析攻击意图，提高攻击门槛是保障专网安全的关键所在。本文从主动防御的角度出发，分析了蜜罐的主动防御优势，设计了将主动防御和被动防御整合的防御生态链，并在专网内建立了蜜罐实验环境，结果表明，主动防御技术可以有效提高攻击者的攻击门槛，从而提高整体网络的安全等级。

Abstract

Abstract：With the rapid development of financial information technology

cyber security events on the financial system have also increased greatly.Active defense plays an important role in improving the defense level of defined private network.How to quickly and effectively deploy and apply honeypot to capture and attack behavior

analyze the attack intention and raise the threshold of attack is the key to ensure the security of the defined private network.From the perspective of active defense

the advantage of honeypot active defense was analyzed

an active defense and defense filling passive defense integration was designed

and a honeypot within private network experimental environment was set up

the results show that the active defense technology can effectively improve the threshold of the attacker's attack

so as to improve the security level of the whole network.

关键词

Keywords

references

石乐义 , 姜蓝蓝 , 贾春福 , 等 . 蜜罐诱骗防御机理的博弈理论分析 [J ] . 电子与信息学报 , 2012 , 34 ( 6 ): 1420 - 1424 .

SHI L Y , JIANG L L JIA C F , et al . A game theoretic analysis for the honeypot deceptive mechanism [J ] . Journal of Electronics ＆Information Technology , 2012 , 34 ( 6 ): 1420 - 1424 .

诸葛建伟 , 唐勇 , 韩心慧 , 等 . 蜜罐技术研究与应用进展 [J ] . 软件学报 , 2013 , 24 ( 4 ): 825 - 842 .

ZHUGE J W , TANG Y , HAN X H , et al . Honeypot technology research and application [J ] . Journal of Software , 2013 , 24 ( 4 ): 825 - 842 .

NASIR Q AL-MOUSA Z A . Honeypots aiding network forensics:challenges and notions [J ] . Journal of Communications , 2013 , 8 ( 11 ): 53 - 84 .

PHAM V H , DACIER M . Honeypot trace forensics:The observation viewpoint matters [J ] . Future Generation Computer Systems-The International Journal Of Escience , 2011 , 27 ( 5 ): 539 - 546 .

MARCHESE M , SURLINELLI R , ZAPPATORE S . Monitoring unauthorized internet accesses through a 'honeypot' system [J ] . International Journal Of Communication Systems , 2011 , 24 ( 1 ): 75 - 93 .

YANG H S . A study on attack information collection using virtualization technology [J ] . Multimedia Tools and Applications , 2015 , 74 ( 20 ): 8791 - 8799 .

郭军权 , 诸葛建伟 , 孙东红 , 等 . Spampot:基于分布式蜜罐的垃圾邮件捕获系统 [J ] . 计算机研究与发展 , 2014 , 51 ( 5 ): 1071 - 1080 .

GUO J Q , ZHUGE J W , SUN D H , et al . Spampot:A spam capture systems based on distributed honeypot [J ] . Journal of Computer Research and Development , 2014 , 51 ( 5 ): 1071 - 1080 .

ZHAN Z X , XU M C , XU S H . Characterizing honeypot-captured cyber attacks:statistical framework and case study [J ] . Transactions on Information Forensics and Security , 2013 , 8 ( 11 ): 1775 - 1789 .

WANG K , DU M , MAHARJAN S , et al . Strategic honeypot game model for distributed denial of service attacks in the smart grid [J ] . Transactions on Smart Grid , 2017 , 8 ( 5 ): 2474 - 2482 .

LA Q D , QUEK T , LEE J , et al . Deceptive attack and defense game in honeypot-enabled networks for the internet of things [J ] . Internet of Things Journal , 2016 , 3 ( 6 ): 1025 - 1035 .

AKIYAMA M , YAGI T , YADA T , et al . Analyzing the ecosystem of malicious URL redirection through longitudinal observation from honeypots [J ] . Computers ＆ Security , 2017 , 69 : 155 - 173 .

BABU M R , USHA G . A novel honeypot based detection and isolation approach (NHBADI) to detect and isolate black hole attacks in manet [J ] . Wireless Personal Communications , 2016 , 90 ( 2SI ): 831 - 845 .

SELVARAJ R , KUTHADI V M , MARWALA T . Ant-based distributed denial of service detection technique using roaming virtual honeypots [J ] . IET Communications , 2016 , 10 ( 8 ): 929 - 935 .

JIANG C B , LIU I H , CHUNG Y N , et al . Novel intrusion prediction mechanism based on honeypot log similarity [J ] . International Journal Of Network Management , 2016 , 26 ( 3 ): 156 - 175 .

ZHANG W Z , HE H , KIM T H . Xen-based virtual honeypot system for smart device [J ] . Multimedia Tools and Applications , 2015 , 74 ( 19 ): 8541 - 8558 .

GHOURABI A , ABBES T , BOUHOULA A . Characterization of attacks collected from the deployment of Web service honeypot [J ] . Security And Communication Networks , 2014 , 7 ( 2 ): 338 - 351 .

KIM H G , KIM D , CHO S J , et al . Efficient detection of malicious web pages using high-interaction client honeypots [J ] . Journal of Information Science and Engineering , 2012 , 28 ( 5 ): 911 - 924 .

Views

3463

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Cyber ranges: survey and perspective

Overview on industrial Internet honeynet technology

Strategy of container migration and honeypot deployment based on signal game in cloud environment

Accelerated traffic replay method based on time compression

High resistance botnet based on smart contract

Related Author

JIA Yan

GU Zhaoquan

HU Ning

ZOU Xing

ZHOU Wen

LIN Xin

JIANG Yaguang

CHEN Xi

Related Institution

New Network Research Department of Pengcheng Laboratory

College of Computer Science and Technology, Harbin Institute of Technology

School of Software and Microelectronics, Peking University

China Center for Information Industry Development

China Software Testing Center(CSIP)

⁰