Implementation method of dynamic intelligent self-adaptive honeynet

Abstract

The invention discloses an implementation method of a dynamic intelligent self-adaptive honeynet, which comprises a dynamic intelligent self-adaptive honeynet architecture. The dynamic intelligent self-adaptive honeynet architecture comprises an intelligent honeynet architecture basic hardware facility layer, an intelligent honeynet architecture component recognition engine layer, an intelligent honeynet architecture decision distribution engine layer, an intelligent honeynet architecture flow cleaning engine layer, an intelligent honeynet architecture forwarding decision engine layer and an intelligent honeynet architecture behavior learning engine layer. Through mutual configuration and cooperation of multiple engines, the flexibility of the honeynet is improved, and the score of the attacker connection activity, the self-adaptive attack and the network environment are calculated according to the algorithm weight. Aiming at the problems of a traditional honeypot, resources are reasonably called and a honeynet most suitable for a client is deployed according to the actual situation of the client and the strength degree of an attack technique, and a balance point is achieved between the threat perception effect and the resource utilization efficiency.

Description

technical field [0001] The invention relates to the field of computer information security detection, in particular to a method for realizing a dynamic intelligent self-adaptive honeynet. Background technique [0002] Honeypot technology is essentially a technology to deceive the attacker. By arranging some hosts, network services or information as bait, the attacker is induced to attack the honeypot, so that the behavior of the attacker can be captured or analyzed. Understand the tools and methods used by the attacker, and speculate on the attack intent and motivation. In the existing technology, the software and hardware coupling of traditional honeypots is difficult to deploy on a large scale, and it is difficult to deploy intelligently and adaptively according to the user's real network environment. The fingerprints of honeypots are easily identified by hackers and lose their confusion. Therefore, the technical problem to be solved by this technical solution is how to d...

AI Technical Summary

Problems solved by technology

In the existing technology, the software and hardware coupling of traditional honeypots is difficult to deploy on a large scale, and it is difficult to deploy intelligently and adaptively according to the real network environment of users. The fingerprints of honeypots are easily identified by hackers, and they lose their confusion

Images