| 针对应用层未知攻击的蜜罐系统框架的研究与实现 |
| |
| 引用本文： | 曹登元,周莲英,刘芳.针对应用层未知攻击的蜜罐系统框架的研究与实现[J].计算机工程与设计,2006,27(5):765-767. |
| |
| 作者姓名： | 曹登元 周莲英 刘芳 |
| |
| 作者单位： | 江苏大学,计算机科学与通信工程学院,江苏,镇江,212013 |
| |
| 基金项目： | 江苏省教育厅自然科学基金 |
| |
| 摘 要： | 随着网络攻击事件越来越多，特别是新的漏洞以及其攻击的不断发布，网络安全受到严重的威胁。传统的安全技术如防火墙、入侵检测等都不能很好地对新的漏洞和攻击进行检测，所以未知攻击的检测问题已成为难点。利用蜜罐技术来解决未知攻击的检测问题，简要概述了现有的蜜罐技术，提出并实现了一种针对应用层未知攻击的蜜罐系统框架。最后进行了测试并给出了结论。
|
| 关 键 词： | 信息安全 入侵检测系统 蜜罐 系统调用 未知攻击 |
| 文章编号： | 1000-7024（2006）05-0765-03 |
| 收稿时间： | 2004-12-08 |
| 修稿时间： | 2004-12-08 |
Research and implement of honeypot framework for application layer's unknown attacks |
| |
| CAO Deng-yuan,ZHOU Lian-ying,LIU Fang.Research and implement of honeypot framework for application layer''''s unknown attacks[J].Computer Engineering and Design,2006,27(5):765-767. |
| |
| Authors: | CAO Deng-yuan ZHOU Lian-ying LIU Fang |
| |
| Affiliation: | School of Computer Science and Telecommunications Engineering, Jiangsu University, Zhenjiang 212013, China |
| |
| Abstract: | As assault being more and more,especially new security holes and their attacks constantly issued,network security receives the serious threat.Traditional security practice such as firewall,intrusion detection system can't well prevent network system from new security holes and attacks,so the problem of detecting them has already become the difficult point.Honeypot was used to resolve this problem,current honeypot technology was outlined,a honeypot framework for application layer's unknown attacks was presented and realized.At last,the framework was tested and the conclusion was given. |
| |
| Keywords: | information security intrusion detection system honeypot system call unknown attacks |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
