Network masquerading method, apparatus, device, and computer-readable storage medium

Abstract

The invention discloses a network masquerading method, device, equipment and computer-readable storage medium. The network masquerading method comprises the following steps: when a first attack packet sent by an attacker is received for the first time, the first attack packet is sent by an attacker for the first time. The masquerading address in the destination address is converted into the real address of the real host; the first attack packet is sent to the real host; when the first response packet matching the first attack packet is received, the The address information in the source address of the first response packet is converted into the fake address, and the first response packet is sent to the attacker. When the invention captures the first attack packet sent by the attacker, the destination address in the attack packet is converted into the real address of the real host, the attacker is directed to the real host, and the real host can accurately respond to the attacker, thereby improving the It improves the simulation degree of honeypot or honeynet, and solves the technical problem that traditional honeypot or honeynet is easy to be seen by attackers.

Description

technical field [0001] The present invention relates to the field of network security, and in particular, to a network masquerading method, apparatus, device and computer-readable storage medium. Background technique [0002] A honeypot is a security resource whose value lies in being scanned, attacked, and compromised. This definition indicates that the honeypot has no other practical role, so all network traffic to / from the honeypot may be indicative of scanning, attack, and compromise. Honeynet is a new concept gradually developed in honeypot technology, also known as trapping network, which consists of honeywall and several honeypots. Honeynet technology is essentially a kind of research-based high-interaction honeypot technology, whose main purpose is to collect attack information of hackers. But the difference from the traditional honeypot technology is that the honeynet constitutes a hacker trapping network architecture. [0003] Honeynet has three core requirement...

AI Technical Summary

Problems solved by technology

[0005] The main purpose of the present invention is to provide a network camouflage method, device, equipment and computer-readable storage medium, aiming to solve the technical problem that traditional honeypots or honeynets are easily seen through by attackers

Images