Network camouflage method, device, equipment and computer readable storage medium

Abstract

The invention discloses a network camouflage method, a device, equipment and a computer readable storage medium, the network camouflage method comprises the following steps: when a first attack packetsent by an attacker is received for the first time, converting a camouflage address in a destination address of the first attack packet into a real address of a real host; sending the first attack packet to the real host; and when a first response packet matched with the first attack packet is received, converting address information in a source address of the first response packet into the camouflage address, and sending the first response packet to the attacker. According to the method, after capturing a first attack packet sent by an attacker, the target address in the attack packet is converted into the real address of the real host, the attacker is oriented to the real host, and the real host accurately responds to the attacker, so that the simulation degree of the honeypot or honeynet is improved, and the technical problem that the traditional honeypot or honeynet is easily broken by the attacker is solved.

Description

technical field [0001] The invention relates to the field of network security, in particular to a network camouflage method, device, equipment and computer-readable storage medium. Background technique [0002] A honeypot is a security resource whose value lies in being scanned, attacked and compromised. This definition implies that the honeypot serves no real purpose, so all network traffic to / from the honeypot may indicate scanning, attacks, and compromises. The honeynet is a new concept gradually developed in the honeypot technology, also known as the trapping network, which consists of a honey wall and several honeypots. Honeynet technology is essentially a research-type high-interaction honeypot technology, and its main purpose is to collect hacker attack information. But the difference with the traditional honeypot technology is that the honeynet constitutes a hacker entrapment network architecture. [0003] Honeynet has three core requirements, namely data control,...

AI Technical Summary

Problems solved by technology

[0005] The main purpose of the present invention is to provide a network camouflage method, device, equipment and computer-readable storage medium, aiming to solve the technical problem that traditional honeypots or honeynets are easily seen through by attackers

Images