Safe trapping method and device and computer equipment

Abstract

The present application is applicable to the technical field of network security, and provides a secure trapping method, comprising: generating a plurality of categories of first simulation devices and first virtual services, the first simulation devices and the first virtual services being generated through a simulator according to device parameters of physical devices and application scenarios of the physical devices; generating shadow equipment of the entity equipment, wherein each shadow equipment corresponds to a plurality of virtual communication addresses; and when the virtual communication address receives a traffic data packet from the attack device, if the shadow device corresponding to the virtual communication address is high interaction, forwarding the traffic data packet to the corresponding first simulation device and / or the first virtual service through the shadow device. According to the method, the simulation device is generated through the simulator corresponding to the entity device, and then deployment of the industrial internet deception trapping system is achieved. And a plurality of containers do not need to be generated, so that a large amount of server resources can be saved, and the cost of deploying the industrial internet deception trapping system is reduced.

Description

technical field [0001] The present application belongs to the technical field of network security, and in particular relates to a security trapping method and device. Background technique [0002] With the transformation and upgrading of industries, the Industrial Internet has been widely used. However, there are network information security problems in the application of the Industrial Internet, such as information leakage, cyber attacks, and exploitable security loopholes. At present, it is possible to use the industrial Internet to deceive and trap systems for active defense and obtain threat intelligence. [0003] However, the existing industrial Internet deception and trapping system needs to occupy a lot of server resources during deployment, and the deployment cost is relatively high. SUMMARY OF THE INVENTION [0004] The embodiments of the present application provide a security trapping method and device, which can solve the problem that the industrial Internet d...

AI Technical Summary

Problems solved by technology

[0004] The embodiment of the present application provides a security trapping method and device, which can solve the problem that the deployment of the industrial Internet fraud trapping system needs to occupy a large amount of server resources and the deployment cost is high

Images