摘要： 针对传统蜜罐存在伪装度低与交互性差的问题，设计一个层次化清晰的高伪装与高交互蜜罐系统。该系统包括数据引入层、伪装层、数据检测层、数据重定向层和应用服务器集群组。利用代理ARP技术、虚拟路由技术、libpcap实现的协议处理技术、数据重定向技术，该系统实现了路由伪装、IP地址伪装、操作系统伪装、高交互服务伪装、漏洞伪装等网络伪装技术。
关键词:
蜜罐,
网络伪装,
数据重定向,
高交互
Abstract: Aiming at the problem of traditional honeypot have shortcomings of low camouflage and low interaction, a high camouflage and highly interactive honeypot system is designed, including data processing layer, camouflage layer, data acquisition layer, data redirection layer and cluster servers. By the technology of ARP agent technology, virtual routing technology, protocol processing technology of libcap realizing, data direction technology, the system receives routing camouflage, IP address camouflage, operating system camouflage, highly interactive services camouflage, and hole spoof.
Key words:
honeypot,
network camouflage,
data redirection,
highly interactive
中图分类号:
赵军. 高伪装高交互蜜罐技术的研究与实现[J]. 计算机工程, 2010, 36(15): 156-158.
DIAO Jun. Research and Implementation of High Camouflage and Highly Interactive Honeypot Technology[J]. Computer Engineering, 2010, 36(15): 156-158.