The invention provides an
active defense-oriented dynamic deception
domain name honey point generation method and
system, and relates to the technical field of
network security active deception, and the specific scheme is as follows: accessing and storing a webpage of a real service based on a
headless browser, analyzing the type of the webpage, and recording by adopting different strategies to obtain webpage variables; rendering the webpage variable based on a re-renderer component, then performing page
cloning to obtain a
simulation webpage, packaging the
simulation webpage, and constructing a container
mirror image in combination with a known container template to obtain a honey point equipment container; and collecting and marking an attacker request based on the honey point device container to obtain an
attack log, obtaining an optimal period based on a multi-objective optimization
algorithm, and dynamically adjusting the period of binding the false
domain name to the honey point device container based on the optimal period to obtain the
domain name honey point. The problems that the domain name is difficult to adapt to the strategy change of an attacker and the defense strategy is difficult to dynamically optimize according to the behavior of the attacker are solved.