Network security vulnerability defense system based on dynamic camouflage

Abstract

The invention provides a network security vulnerability defense system based on dynamic camouflage. According to basic technical idea of the system, a network dynamic environment is constructed basedon the concept of moving target defense, a large number of dynamic false hosts is constructed around a protected host by using a network spoofing technology, and a dynamic false vulnerability libraryis constructed to trap attackers; in addition, for a real host, a plurality of false vulnerability libraries can be randomly and dynamically generated for the real host. No matter a hacker performs vulnerability scanning on the target host by using a known or unknown vulnerability scanning tool, a false vulnerability in the virtual or real host is touched inescapably, an alarm of a defense systemcan be triggered when the false vulnerability is detected and utilized, and the defense system can automatically position an attacker in real time and cut off a first loop of a network attack chain, so that beforehand defense is realized and the threat of an unknown vulnerability is effectively reduced.

Description

technical field [0001] The invention relates to the field of network security, in particular to a network security loophole defense system based on dynamic camouflage. Background technique [0002] With the rapid development of network technology, the Internet has become an indispensable part of human production and life, and the wave of informatization affects every corner of modern civilized society. According to the statistical report released by the China Internet Network Information Center, as of June 30, 2018, the number of Internet users in my country reached 802 million, with a penetration rate of 57.7%; the number of mobile Internet users reached 788 million, and the number of online payment users in my country reached 569 million. While informatization continues to advance, due to the openness of the Internet, various network security issues are also constantly arising. Attackers can easily invade and attack the target network by using technical means such as scann...

AI Technical Summary

Problems solved by technology

Existing defense technologies are powerless in the face of the endless loopholes. Attackers often have enough time to analyze the network architecture, host system, defense technology and find out the loopholes, so as to gradually infiltrate the network and achieve the purpose of attack.

Images