Attack countering implementation system and method based on honeypot technology

Abstract

The invention discloses an attack countering implementation system based on a honeypot technology. The attack countering implementation system based on the honeypot technology comprises a honeypot host, a honeypot environment deployment module, a countering mechanism setting module and a countering module service side; a countering module client side used for information acquisition is arranged ina host and a network environment, where an attacker is; the honeypot host includes a specific document and a specific system mechanism; and information acquired by the countering module client side includes obtaining of attacker information and controlling of an environment, where an attacker is. The attack countering implementation system based on the honeypot technology is simple and reasonableto set; the problem that effective tracing and reverse control cannot be carried out due to the fact that the honeypot only can passively wait for an attacker in the past can be solved; and an attackcountering implementation system based on the honeypot technology is simple, and easy in large-scale popularization and application.

Description

technical field [0001] The invention relates to the technical field of network security, more specifically, it relates to a system and method for implementing attack countermeasures based on honeypot technology. Background technique [0002] In recent years, computer networks have developed rapidly in recent years. During the rapid development of the network, the maturity of network technology makes network connection easier. While people enjoy the convenience brought by the network, the security of the network is increasingly threatened. [0003] Network attack behavior is becoming more and more complex, and various methods are integrated with each other, making network security defense more difficult. Hacker attacks are more organized, and the target of the attack has shifted from the simple pursuit of "glory" to the direction of obtaining various practical benefits. The emergence and increasing proliferation of online Trojan horses, spy programs, malicious websites, and ...

AI Technical Summary

Problems solved by technology

[0005] Traditional honeypots can only passively wait for the attacker's attack, and cannot take effective countermeasures against the attacker. Currently, a method that can effectively counter the attacker is needed, changing passive defense into actively tracking the attacker. Effective traceability and reverse control technology methods

[0006] In the existing technology, it is difficult to obtain the effective information of the attacker and trace the source through the honeypot, let alone control the attacker in reverse, which has significant defects:

[0007] (1) The attacker enters the honeypot through multiple springboards, and it is difficult to directly obtain the information of the attacker's real host from the honeypot;

[0008] (2) Traditional honeypots cannot reversely control attackers

Images