Honeypot defense method and system based on mimicry defense, equipment and medium

Abstract

The invention discloses a honeypot defense method and system based on mimicry defense, equipment and a medium, which are applied to the technical field of network security. A virtualization managementsubsystem comprises a mirror image management module, a honeypot management module, a virtual network management module and a control scheduler which are connected in sequence, the mirror image management module constructs a mimicry honeypot mirror image through a KVM virtual machine mirror image technology, a plurality of virtual high-interaction honeypots and a mimicry honeypot system are obtained, and the honeypots are mimicry honeypots; the honeypot management module manages the honeypots and monitors the state of the honeypots; the virtual network management module controls the honeypotsystem to perform data access and network communication; and a control scheduler dynamically switches the mimicry honeypots and the network according to the output judgment result of the mimicry honeypots. According to the invention, mimicry defense is combined with the honeypot system, so that the security and controllability of network space security defense are improved.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a honeypot defense method, system, equipment and medium based on mimicry defense. Background technique [0002] The Internet has always been subject to various network security threats, and the network attack methods emerge in endlessly, the means are changeable, and the attack targets are different. In the process of attack and defense, even a small design negligence may cause serious system loopholes, and attackers may cause serious harm by exploiting these loopholes to attack the system. The defender needs to make the defense of the system or node foolproof to ensure complete security. At the same time, the defender knows nothing about the attackers who can come from anywhere in the network, while the system or nodes are completely exposed to the attackers through the network. In such an offensive and defensive game environment, the attacker occupies an active posit...

AI Technical Summary

Problems solved by technology

In the process of attack and defense, even a small design negligence may cause serious system loopholes, and attackers may cause serious damage by exploiting these loopholes to attack the system

Images