Honeypot系统研究与比较

Honeypot系统是构建一个跟实际系统类似的网络陷阱,成为现有网络安全体系的重要补充手段。它可以诱惑攻击者将时间和资源都花费在攻击Honeypot上,从而保护真实工作系统免于攻击。它能监视和跟踪入侵者,收集入侵者的信息,以分析系统所面临的威胁,研究入侵者所用的入侵工具、策略和动机,在网络安全中起着主动防御的作用,是现有安全体系的重要补充。文章分析了构造Honeypot的分类及其优缺点,对Honeypot的实现软件进行比较,并指出了Honeypot系统存在的不足。

The Research and Comparison of Honeypot System

Honeypot system is a network trap which is the same as the actual system and becomes an important supplementary method of the existing network security system. It can lure attackers to spend time and resoures attacking honeypot,in this way, it can protect production resources from attacking. It can monitor and track the attackers, collect information on them so that it can analyze the threats that the system is facing and learn the tools, tactics and motives of the attackers. So honeypot is playing the active defense role in the network security and it is an important supplement of the existing security system. This article has analyzed the honeypot's classification and its advantages and disadvantages, has made the comparison with the honeypot realization software and has pointed out the insufficiency of the honeypot system.