蜜网系统是网络安全中主动防御的必要措施,利用分布式蜜罐节点构建诱骗黑客的虚拟系统,具有准确、高效的入侵数据捕获能力.针对目前研究蜜网整体伪装缺乏理论模型指导的现状,建立了一种衡量蜜网诱骗能力及价值的量化模型,用于解决提高蜜网智能伪装能力的问题.基于模型提出了动态部署蜜网的设计方案,动态部署实现了蜜网整体伪装能力的提高,由于模型的理论参考避免了原来凭经验的盲目部署.模拟实验结果验证了模型的有效性和算法的可行性.%Constructing a Honeynet system is a necessary step for active defense of networks security. It can capture packets of intrusion accurately and efficiently by many honeypots. Nowadays systematic model on disguise of Honeynet is still missing. This paper presents a novel honeynet model to quantize the capacity of inducing and value of Honeynet. This model can be used to improve the capacity of disguise of Honeynet. This paper puts forward a dynamic deploying scheme of Honeynet in order to improve the disguise of Honeynet based on the model. According to the model it can avoid blind deployment as before. Simulation results verify the validity of model and feasibility of algorithm.
展开▼
