摘要
部署溯源蜜罐是提高Web网络安全性和稳定性的重要手段。Web溯源蜜罐能通过多种探测手段主动获取攻击者的关键信息,以此完成对攻击者的溯源反制。该文针对Web溯源蜜罐面临的隐蔽性低、对抗防御能力不足等问题,调研了Web溯源蜜罐的研究现状,对比整理了Web溯源蜜罐的类型和特点,按蜜罐部署方式和设计标准分类介绍了其主要类型情况,分析了具有代表性的两款蜜罐的技术细节和具体实现框架,并给出了攻防对抗环境下的Web溯源蜜罐防御体系构建思路。
The deployment of traceability honeypots is an important means to improve the security and stability of Web networks,and Web traceability honeypots can actively obtain the key information of attackers through various detection methods to complete the traceability countermeasures against attackers.In view of the problems faced by Web traceability honeypots such as low concealment and the insufficient countermeasure and defense capability,this paper investigates the research status of Web traceability honeypots,compares and organizes the types and characteristics of Web traceability honeypots,introduces their main types according to the deployment methods and design standards of honeypots,analyzes the technical details and specific implementation framework of two representative honeypots,and gives the construction idea of the Web traceability honeypot defense system under the attack-defense countermeasure environment.
作者
丁锐
DING Rui(Kunlun Digital Technology Co.,Ltd.,Beijing,100026 China)
出处
《科技资讯》
2023年第18期56-59,共4页
Science & Technology Information
