Virtual node and honeypot combined trapping attack method, device and system

Abstract

The invention relates to the technical field of mobile communication and Internet, and discloses a virtual node and honeypot combined trapping attack method, device and system, the virtual node and honeypot combined trapping attack method comprises the following steps: receiving an attack behavior generated on a virtual node monitored by a honeypot; judging whether the attack behavior belongs to threat perception or not by analyzing the attack behavior; if the attack behavior does not belong to threat perception, ignoring the attack behavior; and when the threatening perception is judged, calling a honeypot to simulate real equipment to make a corresponding response, and trapping an attacker to continue attacking. After the risk perception is judged, the honeypot encrypts the virtual data packet to achieve the effect of trapping an attacker, at the moment, the virtual node is mainly a carrier of the virtual data packet, the honeypot is mainly used for acquiring an attack behavior, and the virtual node and the honeypot are combined, so that the virtual node can also perform trapping response to the attacker in the process of trapping the attacker to attack, and the attack behavior can be effectively trapped. The virtual nodes are more real, and trapping attacks are more effective.

Description

Technical field [0001] A trap attack method, device and system combining virtual node and honeypot. Background [0002] In network communication, network protocols are vulnerable to malicious attacks, resulting in normal communication between devices, and now it is common to establish virtual modules on the device or between devices and routers, so that the ports attacked by attackers are transferred to virtual modules. [0003] Usually the virtual module only includes the IP address and port, and cannot carry out other support services, resulting in the attacker's attack behavior being arbitrary. Contents of the Invention [0004] In order to induce an attacker to attack a virtual module, the present application provides a trap attack method, apparatus and system combining a virtual node and a honeypot, having the characteristics of trapping an attacker to attack a virtual node by combining a honeypot and a virtual node. [0005] The object of the above invention of the presen...

AI Technical Summary

Problems solved by technology

[0002] In network communication, the network protocol is vulnerable to malicious attacks, resulting in the failure of normal communication between devices. Nowadays, virtual modules are usually established on the device or between the device and the router, so that the port attacked by the attacker is transferred to the virtual module. superior

[0003] Usually, the virtual module only includes IP address and port, and cannot perform other supporting services, so the attacker's attack behavior is random

Images