Spurious response system and method based on dynamic variation and network security system and method

Abstract

The invention provides a spurious response system and method based on dynamic variation and a network security system and method.The spurious response system comprises a spurious response information configuration unit and a spurious response unit, the spurious response information configuration unit configures spurious response information which can be varied dynamically and comprises a spurious IP address and a spurious MAC address at a minimum according to user configuration information, and the spurious response unit constructs a spurious response data packet and conducts spurious response on suspected scanning detection data packets according to the spurious response information.According to the spurious response system and method, spurious response is conducted on scanning detection behaviors of attackers, spurious response can be varied dynamically according to configuration, thereby the attackers cannot obtain the topological structure of a network and cannot accurately obtain real information of hosts in the network, in this way, network penetration attacking behaviors are effectively defended, and safety and stability of the network are maintained.

Description

technical field [0001] The invention relates to the field of network security, in particular to a dynamic transformation-based false response system, a false response method, a network security system and a network security defense method based thereon. Background technique [0002] With the rapid development of computer networks and information technology, the process of global informatization continues to accelerate, and the network plays an increasingly important role in today's society, becoming a national strategic resource covering important fields such as government, commerce, finance, and communications. At the same time, network security threats are also emerging in an endless stream. Attackers enter the network system through technical means or social engineering methods to carry out information theft, system destruction, malicious deception and other activities, which not only affect the work and life of ordinary people, but also become threats. Major issues of ec...

AI Technical Summary

Problems solved by technology

To a certain extent, the system can provide legality management and behavior audit of intranet resources, and prevent internal attacks and unauthorized access behaviors. However, due to the large number of modules involved and complex deployment, its practicability and versatility are poor.

[0007] In general, the existing detection methods for network penetration attacks cannot achieve good results in practical applications. definite

Images