Honeypot dynamic deployment method and device thereof, electronic equipment and readable storage medium

Abstract

The invention provides a honeypot dynamic deployment method and a device thereof, electronic equipment and a readable storage medium, asset information in a protection area is obtained by detecting assets in the protection area, honeypot deployment is automatically carried out based on a set deployment strategy and according to the asset information, wherein each deployed honeypot is bound with a virtual IP, and the virtual IP is constructed according to the idle IP of the assets counterfeited by the honeypot in the protection area in the same network segment. According to the scheme, asset management and honeypot deployment are combined, the honeypot is deployed with asset information as the reference, the counterfeit simulation performance is higher, the IP does not need to be fixed, and honeypot IP deployment can be performed by using the idle IP in the network, so that the problem of avoiding large-range honeypot coverage due to worry about IP conflict can be avoided, and large-coverage-range deployment of the honeypot can be realized.

Description

technical field [0001] The present application relates to the technical field of network security, in particular to a honeypot dynamic deployment method, device, electronic equipment and readable storage medium. Background technique [0002] Honeypot is a deception defense system. It is different from traditional security monitoring products. It does not need to defend against attacks based on security rules. It is complementary to traditional security products. The current honeypot products mainly have the ability to perceive threats, contain attackers, trace the attack process and attackers, and counter attackers. However, maximum capability is required to perceive a threat in order to fully exploit its capabilities. By specifying the IP of the honeypot and the corresponding honeypot service in the intranet, the intranet can be covered to a certain extent, the threat can be perceived to a certain extent, and corresponding measures can be taken to eliminate the threat. ...

AI Technical Summary

Problems solved by technology

[0004] However, the existing honeypot deployment method only realizes the basic deployment of honeypots, and the effects of fake authenticity of honeypots and coverage of honeypot deployment are not good.

Images