基于移动目标防御的内网防渗透技术研究

摘要

This paper presented a technology of inner network permeating prevention based on moving target defense,which could translate the host real IP to dynamic virtual IP,made attacker scan failed and difficult to obtain host’s IP to permeate. Normal users obtained virtual IP via host's domain name to carry out normal communication.It implemented this technology as a network access device which had been tested in real inner network.Experimental results show that this technology can im-prove inner network security effectively.%提出了一种基于移动目标防御（moving target defense）思想的内网防渗透技术。在通信过程中将主机的真实地址修改为动态变化的虚拟地址，使得攻击者的扫描探测失效，从而难以获取内网主机地址并开展网络渗透；正常用户可通过主机域名查询虚拟地址，开展正常通信。该技术已实现为网络接入设备形态，并已在内网环境中测试。实验结果表明，该技术能有效地提升内网安全性。