李阳,
马猛飞
中国石油大学(华东)计算机与通信工程学院 ??青岛 ??266580
基金项目:国家自然科学基金(61772551)
详细信息
作者简介:石乐义：男，1975年生，博士，教授，研究方向为网络安全、博弈理论、移动互联网
李阳：女，1993年生，硕士生，研究方向为网络安全、蜜罐、区块链
马猛飞：男，1993年生，硕士生，研究方向为网络安全、主动防御
通讯作者:石乐义 shileyi@upc.edu.cn
中图分类号:TP393.08计量
文章访问数:2137
HTML全文浏览量:974
PDF下载量:201
被引次数:0
出版历程
收稿日期:2018-03-28
修回日期:2018-10-30
网络出版日期:2018-11-09
刊出日期:2019-02-01
Latest Research Progress of Honeypot Technology
Leyi SHI,,Yang LI,
Mengfei MA
College of Computer and Communication of Engineering, China University of Petroleum, Qingdao 266580, China
Funds:The National Natural Science Foundation of China (61772551)
摘要
摘要:蜜罐技术是网络防御中的陷阱技术，它通过吸引诱骗攻击者并记录其攻击行为，从而研究学习敌手的攻击目的和攻击手段，保护真实服务资源。然而，传统蜜罐技术存在着静态配置、固定部署等先天不足，极易被攻击者识别绕过而失去诱骗价值。因此，如何提高蜜罐的动态性与诱骗性成为蜜罐领域的关键问题。该文对近年来国内外蜜罐领域研究成果进行了梳理，首先总结了蜜罐发展历史，随后以蜜罐关键技术为核心，对执行过程、部署方式、反识别思想、博弈理论基础进行了分析；最后，对近年来不同蜜罐防御成果分类叙述，并对蜜罐技术发展趋势进行了分析陈述，针对潜在安全威胁，展望新兴领域防御应用。
关键词:网络安全/
蜜罐技术/
蜜网/
反蜜罐/
攻防策略/
主动防御
Abstract:Honeypot technology is a network trap in cyber defense. It can attract and deceive attackers and record their attack behavior, so as to study the target and attack means of the adversary and protect real service resources. However, because of the static configuration and the fixed deployment in traditional honeypots, it is as easy as a pie for intruders to identify and escape those traps, which makes them meaningless. Therefore, how to improve the dynamic characteristic and the camouflage performance of honeypot becomes a key problem in the field of honeypot. In this paper, the recent research achievements in honeypot are summarized. Firstly, the development history of honeypot in four stages is summed up. Subsequently, by focusing on the key honeypot mechanism, the analysis on process, deployment, counter-recognition and game theory are carried out. Finally, the achievements of honeypot in different aspects are characterized and the development trends of honeypot technology is depicted.
Key words:Network security/
Honeypot technology/
Honeynet/
Anti-honeypot/
Attack-defense strategy/
Proactive defense
PDF全文下载地址:
https://jeit.ac.cn/article/exportPdf?id=06f2f376-58fc-42eb-a3df-cb53937c93d7
