Hybrid dynamic honeypot deployment system based on cloud platform

Abstract

The invention discloses a hybrid dynamic honeypot deployment system based on a cloud platform. The system is deployed on the cloud platform, and comprises a low-interaction honeypot, a firewall, an analysis module, a traffic redirector, a control module, a high-interaction network, and a safeguard module, wherein the low-interaction honeypot is arranged outside the firewall and used for attractingattack traffics of an attacker; the analysis module can analyze attack behaviors of the attacker, and find out the optimum deceiving mode for a specific suspicious network traffic; the traffic redirector is used for carrying out address redirection on the suspicious traffic obtained through analysis of the analysis module; and the control module is used for guiding the traffic, on which the address redirection is carried out, to a corresponding honeypot in the high-interaction network. The hybrid dynamic honeypot deployment system based on the cloud platform provided by the invention has theadvantages that characteristics of the low-interaction honeypot and a high-interaction honeypot are combined, and the two types of the honeypots are deployed at the same time to fully exert the corresponding characteristics and advantages, so that the fidelity and the performance of a honeypot system are improved.

Description

technical field [0001] The invention belongs to the technical field of network security, in particular to a hybrid honeypot dynamic deployment system based on a cloud platform. Background technique [0002] With the rapid development of computer and network technology, accompanied by increasing security problems, new attack techniques and security threats continue to emerge and continue to evolve. Due to the inherent non-equivalence between attack and defense, defense technology cannot be developed before attack technology, resulting in increasing Internet security risks. Attackers can try to find loopholes at any time, and rarely bear the loss and risk of mistakes , and the defender needs to implement monitoring around the clock, and can implement effective defense only after some unknown attack occurs. [0003] The original network defense technologies such as firewall, intrusion detection, encryption and other technologies can be called passive defense in terms of their ...

AI Technical Summary

Problems solved by technology

[0006] The purpose of the present invention is to provide a hybrid honeypot dynamic deployment system based on cloud platform, which is used to solve the problem of security loopholes in existing host applications

Images