This paper introduced a new technique of examinning network worm-using honeypot to beguile and detect network worm.The article analyzed the theory and merit of it ,Then analyzed the merit of using HONEYD to do it .Through analyzing the structure of HONEYD,the paper introduced the key technique of HONEYD simulating honeypot- fingerprinting matching and virtual routing topologies.Finally,installed virtual honeypot to beguile and detect "Worm.Blaster".
展开▼