摘要
网络安全蜜罐技术以平行仿真技术为核心,通过构造与现实网络系统相对应的场景和访问环境,综合利用虚拟化、云计算、大数据分析、攻防对抗、行为仿真等技术,研发能够进行细粒度场景仿真、支持资源虚实结合、能够模拟仿真各类高逼真的典型网络场景,对攻击者具有强烈诱导和欺骗能力,在其不知情的情况下发现其攻击行为并留存其攻击证据。在真实系统身边构建一个平行仿真的伴生环境--蜜罐,实现高甜度诱捕、零误报发现、高处置防御,为防御体系构建一个全新的优势维度。
The network security honeypot technology based on parallel simulation technology,which constructs verisimilitude scenarios and accessible environment corresponding to the real network system.Parallel simulation technology bases on the comprehensive utilization of virtualization,cloud computing,big data analysis,cyber security attack and defense,behavior simulation and other technologies,develops tool sets for fine-grained scenario simulation platform with various applications running on it.The platform is able to simultaneously build up a variety of highly simulated and isolated cyber secuity scenarios with virtual machines and real devices.The honeypot system,combining the parallel simulation technology with deception technology,makes a zero false alarm discovery,high disposal defense,and new advantage dimension for the defense system.
出处
《信息技术与标准化》
2019年第10期22-25,59,共5页
Information Technology & Standardization
关键词
蜜罐
网络空间安全
攻防对抗
行为仿真
平行仿真
honeypot
cyber space security
attack and defense confrontation
behavior simulation
parallel simulation
