Honeypot deployment method, device and cloud server

Abstract

The invention provides a honeypot deployment method, device and a cloud server. The method comprises the following steps: determining at least one honeypot equipment which needs to be equipped with an analog simulator; controlling to establish a communication connection with the at least one honeypot equipment; and transmitting a mirror image of the analog simulator to the at least one honeypot equipment, so that the at least one honeypot equipment can run the mirror file of the analog simulator and install the analog simulator on the at least one honeypot equipment. The technical scheme of the invention greatly improves the efficiency of deploying the honeypot equipment in batches, realizes the deployment of the honeypot equipment in an automatic way, avoids logining the honeypot equipment manually on the honeypot device, and reduces the deployment cost of the honeypot equipment.

Description

technical field [0001] The present application relates to the field of network technology, in particular to a honeypot deployment method, device and cloud server. Background technique [0002] With the prevalence of embedded devices, embedded devices have gradually become the target of attackers. The existing technology captures the attacker's attack behavior in the network by building a honeypot. The high-interaction honeypot in the prior art uses real operation The system is built and can capture a lot of information. However, since high-interaction honeypots require real embedded devices, there is a possibility of being compromised, and the maintenance cost of high-interaction honeypots is relatively high. Contents of the invention [0003] In view of this, the present application provides a new technical solution, which can realize batch deployment of multiple honeypot devices and reduce the deployment cost of honeypot devices. [0004] In order to achieve the above o...

AI Technical Summary

Problems solved by technology

[0002] With the prevalence of embedded devices, embedded devices have gradually become the target of attackers. The existing technology captures the attacker's attack behavior in the network by building a honeypot. The high-interaction honeypot in the prior art uses real operation The system is built and can capture a large amount of information. However, since high-interaction honeypots require real embedded devices, there is a possibility of being compromised, and the maintenance cost of high-interaction honeypots is relatively high

Images