Method and system for constructing name field in database honeypot

Abstract

The invention discloses a construction method of a name field in a database honeypot. The construction method comprises the following steps: firstly, constructing a surname candidate set and a first name candidate set; setting a project to be subjected to statistics of each element in the surname candidate set and the first name candidate set, and calculating the statistics value of the project to be subjected to statistics of each element; on the basis of a set project to be subjected to statistics, generating a name construction formula; selecting each element of which the statistics value meets the name construction formula to construct the name; filling the constructed name into the name field of the honeypot; and if the name field of the honeypot is maliciously published, utilizing the name construction formula to verify the name field as virtual construction. The invention also discloses a construction system of the name field in the database honeypot. The technical scheme disclosed by the invention can finish automatically filling the name field in the database honeypot, does not affect the credibility of the name field and avoids from publishing a true user name.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a method and system for constructing a name field in a database honeypot. Background technique [0002] In the current network security detection methods, the mechanism of known attack signatures or the technology with behavior analysis sandbox are used to detect known and unknown threats. In the face of targeted attacks and protocols with encrypted transmission, there is often a lack of sufficient detection methods. Honeypot technology can solve such problems more reasonably. By deploying honeypots at the user site, hackers are lured to attack the honeypots to achieve the purpose of detecting attacks and attack processes. [0003] With the current evolution of honeypot technology, due to the lack of rich data, hackers can distinguish whether the target is a honeypot after only a preliminary intrusion, resulting in abandonment of subsequent attacks, thus losing the ...

AI Technical Summary

Problems solved by technology

[0006] The present invention provides a method and system for constructing a name field in a database honeypot. The technical solution described in the present invention mainly considers the rationality of constructing a name and the verifiability of constructing a name's virtuality, thereby solving the problems existing in the traditional name constructing method. plausibility, which raises the question of the attacker's suspicion

Images