Cooperative Active Defense System Based on Honeynet

Abstract

The present invention proposes a honeynet-based cooperative active defense system, including a data capture module, a data analysis module and a data control module, characterized in that: the data capture module, data analysis module and data control module exist in a distributed manner in a honeynet center and multiple subnets. The present invention relies on honeynet technology, adopts cooperative active defense ideas, shares attacker information captured by different honeynets in real time, realizes active defense at the network layer, improves the initiative and real-time performance of defense, and is suitable for large-scale enterprise networks . The system constructed by this method has a high defense rate, hit rate and robustness, and greatly reduces the time delay from the first discovery of the attacker to the deployment of the entire network.

Description

Technical field [0001] The invention relates to the field of network security, in particular to a cooperative active defense system based on a honeynet. Background technique [0002] With the development of the Internet, network security is facing more and more serious threats. There are currently several major network security threats: Trojan horses, worms, botnets, network interception, IPv6 threats, spyware and adware, zero-day vulnerabilities, and DDoS (distributed denial of service) attacks. Effective defense against network security threats has become a top priority. [0003] The types of network security defenses can be divided into host-based and network-based defenses according to different defense positions; according to different defense timings, they can be divided into passive defense and active defense. The traditional passive defense method based on the host layer has been difficult to protect the security of the existing network, so the concept of active defense h...

AI Technical Summary

Problems solved by technology

Although the purpose of defense can be achieved in the end, it is a passive defense that requires a lot of manual participation and has serious lag, making it difficult to systematize and productize

Images