Internet of Things honeynet system based on SOAP service simulation

Abstract

The invention discloses an Internet of Things honeynet system based on SOAP service simulation, and belongs to the technical field of Internet of Things security. The objective of the invention is tomonitor and collect the security state of the Internet of Things, capture the malicious request of a hacker for the Internet of Things, and collect malicious samples. According to the method, a middle-high interaction honeypot is designed according to a router SOAP service vulnerability CVE-2017-17215;; in order to prevent the situation that a hacker performs injecting service details which are not completed by the simulation serviceand the simulation service honeypot cannot respond and cannot capture subsequent malicious codes and samples, the function of supplementing the simulation servicehoneypot with the honeypot for providing the real SOAP service is realized by using equipment firmware with vulnerabilities; in order to capture more types of SOAP attacks, the SOAP port exposed mostin 2018 is analyzed, and a corresponding multi-port honeypot is manufactured. The honeypots are deployed to a plurality of nodes, a control center is designed at the same time to distribute commands and transmit files, and Docker technology packaging is assisted to achieve rapid deployment. Hackers cannot control the Internet of Things equipment through SOAP service vulnerabilities, so that the security of the Internet of Things is improved.

Description

technical field [0001] The invention relates to an Internet of Things honeynet system based on SOAP service simulation, belonging to the technical field of Internet of Things security. Background technique [0002] In recent years, with people's demand for smart life, the Internet of Things industry has developed rapidly. According to the survey, the scale of IoT devices has exceeded tens of billions. Although such a large number of IoT devices can greatly improve our living environment, it also hides huge security risks. At the same time, IoT devices are more vulnerable to attacks because it is difficult to deploy conventional network security measures due to their limited device resources and various operating system architectures. On the one hand, hackers can use IoT devices to steal information or carry out malicious attacks, such as invading cameras to obtain video recordings, controlling the opening and closing of smart devices, etc.; , enterprises, and personal inf...

AI Technical Summary

Problems solved by technology

IoT devices follow the UPnP architecture and control devices through the SOAP protocol, which has led to many hackers controlling IoT devices through SOAP service vulnerabilities, endangering the security of IoT

However, the honeynet system in the existing technology is developed for the traditional Internet system and cannot be directly applied to the field of the Internet of Things.

Images