Cooperative type active defense system based on honey nets

Abstract

The invention provides a cooperative type active defense system based on honey nets. The cooperative type active defense system comprises a data capture module, a data analysis module and a data control module and is characterized in that the data capture module, the data analysis module and the data control module are arranged at the center of one honey net and a plurality of sub nets in a distributed mode. The cooperative type active defense system depends on a honey net technology, a cooperative type active defense thought is adopted, attacker information captured by the different honey nets is shared in real time, active defensiveness of a network layer is achieved, defensive initiative and real-time performance are improved, and the cooperative type active defense system is suitable for large-scale enterprise networks. The cooperative type active defense system built through the method is high in defense rate, hit rate and robustness, and time delay from the time that attackers are firstly found to the time that all network deployment and control is achieved is greatly reduced.

Description

technical field [0001] The invention relates to the field of network security, in particular to a honeynet-based cooperative active defense system. Background technique [0002] With the development of the Internet, network security is facing more and more serious threats. Several major current network security threats: Trojan horses, worms, botnets, network interception, IPv6 threats, spyware and adware, zero-day vulnerabilities, and DDoS (distributed denial of service) attacks. Effective defense against network security threats has become a top priority. [0003] The types of network security defense can be divided into host-based and network-based defenses according to different defense positions; they can be divided into passive defense and active defense according to different defense timing. The traditional passive defense method based on the host layer has been difficult to protect the security of the existing network, so the concept of active defense has emerged, w...

AI Technical Summary

Problems solved by technology

Although the purpose of defense can be achieved in the end, it is a passive defense that requires a lot of manual participation and has serious lag, making it difficult to systematize and productize

Images