Micro-honey pot deployment system, method, device, computer device and storage medium

Abstract

The present specification relates to a micro-honeypot deployment system, method, device, computer equipment and storage medium. The system comprises a micro-honeypot scheduling center, configured to generate a malicious URL according to different vulnerabilities of different technical architectures; send the malicious URL to a probe unit for monitoring; receive the identity information of an attack user collected by each probe in the probe unit, a honeypot corresponding to the attacked business system and the application vulnerability, and generate an attack identifier of the attack user; query the content corresponding to the attack identifier according to the attack identifier; send the content as a response result to the attack user; each probe of the probe unit is respectively deployed in each business system, and the URL is dynamically registered to the probe; the probe is configured to receive a monitoring request sent by the micro-honeypot scheduling center; collect the user access according to the monitoring request; and determine the identity information of the attack user. The present specification realizes the deployment and scheduling capability of the micro-honeypot, and can capture the attack behavior of the attack user.

Images