Unlock instant, AI-driven research and patent intelligence for your innovation.

Novel dynamic honeypot system

A dynamic honeypot and honeypot technology, applied in transmission systems, electrical components, etc., can solve problems such as inability to overcome changes in honeypot technology

Inactive Publication Date: 2020-08-14
广州锦行网络科技有限公司
View PDF8 Cites 6 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0007] None of the above-mentioned patent application documents uses passive identification technology, so it cannot overcome the changes in the existing honeypot technology for the handover of the network environment, and needs to continuously scan the network, resulting in abnormalities in some service settings in the system and the entire system. such as closing

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Novel dynamic honeypot system
  • Novel dynamic honeypot system
  • Novel dynamic honeypot system

Examples

Experimental program
Comparison scheme
Effect test

Embodiment 1

[0055] Passive fingerprint identification technology is based on the principle that each operating system's IP protocol has its own characteristics, and maintains an operating system fingerprint database (such as figure 1 As shown), the characteristics of various operating system data packets are recorded in the operating system fingerprint database. After capturing the data packets in the network, compare them with the records in the database to determine the type of operating system.

[0056] The present embodiment can determine the type of the operating system by 4 domains of the TCP / IP packet header: TTL (lifetime of the packet); Window Size (window size); DF (fragmentation is not allowed); TOS (service type ).

[0057] After capturing a data packet, the type of a system can be basically determined through the analysis of the above four factors. For example, a data packet in a LAN is obtained, which has the following characteristics, that is, the TTL is 64; the Window Size...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention provides a novel dynamic honeypot system, and belongs to the field of honeypots. The system comprises a network information processing module, a decision analysis module, an operating system fingerprint database, an operating system fingerprint identification module, a virtual honeypot processing template and a honeypot template. According to the system, a passive fingerprint identification technology and a virtual honeypot technology are organically combined.

Description

technical field [0001] The invention relates to the technical field of honeypots, in particular to a novel dynamic honeypot system. Background technique [0002] As a brand-new network security technology, honeypot is facing many challenges, one of the biggest challenges is its configuration and maintenance. In order to solve this problem, the idea of ​​dynamic honeypot was finally designed into a model. [0003] The existing dynamic honeypot is a plug-and-play honeypot system, which can automatically determine how many honeypots are configured for the application and how to configure them by monitoring and self-learning the real-time network environment and collecting information from network computers. The honeypot system mainly uses passive fingerprint identification technology and virtual honeypot technology. Passive fingerprint identification technology is based on the IP protocol of each operating system and has its own principles. By capturing and analyzing data pac...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & Authority Applications(China)
IPC IPC(8): H04L29/06
CPCH04L63/1416H04L63/1491H04L63/30
Inventor 胡永泉吴寅鹤
Owner 广州锦行网络科技有限公司