A Deception Defense and Active Defense Based Three-Dimensional Defense Architecture: DA-3DD Design and Implementation Plan

摘要

With the development of network technology, se-curity attacks against IoT and the industrial Internet havebecome more covert and diversified. However, the traditionalnetwork security defense means can only aim at a singleattack, and can only intercept or defend passively, which can'tdeal with the complex security protection forms of IoT andindustrial Internet. Therefore, this paper proposes a three-dimensional defense architecture-DA-3DD based on deceptiondefense and active defense and provides an implementationscheme. The structure of DA-3DD is simple and easy torealize. While integrating traditional network security pro-tection means, two honeypot systems, Information CollectionHoneypot and Reverse Honeypot, are designed additionally, which overcomes the disadvantages of passive and low coverageof traditional honeypot protection system. Finally, the wholearchitecture realizes active, all-round and three-dimensionalnetwork security protection, which provides a new idea forthe design of similar security protection system.