Array honey pot cooperative control method based on block chain

Abstract

The invention relates to an array honey pot cooperative control method based on a block chain. The method comprises the following steps: constructing a private chain by using an Ethereum platform, andrealizing de-centralized cooperative operation thought of a honey pot host cluster through a mining way; constructing a topological structure consistent with the Ethereum platform starting from a P2Pnetworking model, and realizing the communication through web3J. Each host in the array executes the mining, the host acquiring an accounting charging right can holds the post of a honey pot serviceconversion task at one periodic time, conversion information is sent through an encryption mechanism, and other host receives and executes the corresponding conversion instruction. Furthermore, external port request access data is stored in the block chain by using the tamper resistance of the block chain information, thereby obtaining the digital evidence for implementing the attack by an attacker. Through the method disclosed by the invention, the cooperative operation of the array honey pot host cluster is guaranteed, thereby trapping the attacker by using the true-false service in dynamicconversion, and the network security active defense aim is realized.

Description

technical field [0001] The invention relates to a decentralization method of a network active defense system, specifically a blockchain-based array honeypot collaborative control method, starting from the P2P networking model of the blockchain, realizing the distribution of the array deceiving honeypot hosts It belongs to the field of network security technology. Background technique [0002] In the network attack and defense confrontation in the information age, the defender has adopted various strategies to protect the system. Among them, the deceptive honeypot technology is more active than the traditional defense measures. By constructing false vulnerabilities, services, resources And so on to lure the attacker, to achieve the purpose of consumption attack, and then protect the real system. However, the static honeypot is easily detected by the adversary, so that the adversary can avoid the trap and attack the protected system. Therefore, enhancing the dynamics of hone...

AI Technical Summary

Problems solved by technology

Under this centralized control mechanism, if a specific central server goes down, the entire array honeypot system will be paralyzed, causing great losses to the defender

Images