| 浅析蜜罐技术与IDS结合的可行性 |
| |
| 引用本文： | 倪超凡.浅析蜜罐技术与IDS结合的可行性[J].衡水学院学报,2011,13(4):37-39. |
| |
| 作者姓名： | 倪超凡 |
| |
| 作者单位： | 福建师范大学福清分校数学与计算机科学系,福建福清,350300 |
| |
| 摘 要： | 基于入侵检测技术的入侵检测系统(IDS),与传统的防火墙相比,有能够同时监控进出网络的数据流,不需要跨接在任何链路上,无须网络流量流经便可以工作等优点,但也存在一些缺陷,比如对未知的攻击行为无能为力,漏报率和误报率过高等.蜜罐技术是基于主动防御理论而提出的一种入侵诱骗技术,它的主要作用就是通过模拟真实的网络和服务来吸引黑客进行攻击,收集入侵者的特征数据,为发现新的攻击类型提供重要的参考数据.将蜜罐技术引入到IDS当中可以大大完善IDS误报率和漏报率高的缺点.着重分析了蜜罐技术与IDS结合的可行性,并提出了一种基于蜜罐技术的入侵检测模型.
|
| 关 键 词： | 网络安全 入侵检测系统 蜜罐技术 |
The Feasibility Of Combining Honeypot With IDS |
| |
| NI Chao-fan.The Feasibility Of Combining Honeypot With IDS[J].Journal of Hengshui University,2011,13(4):37-39. |
| |
| Authors: | NI Chao-fan |
| |
| Institution: | NI Chao-fan(Department of Mathematics and Computer Science,Fuqing Branch of Fujian Normal University,Fuqing,Fujian 350300,China) |
| |
| Abstract: | Compared to the traditional firewalls,IDS,based on intrusion detection technology,is able to control network data flow without any link and can work well without network data flow.Although IDS has so many advantages,it has disadvantages,such as incapable of dealing with unknown attack,high false negative and high false positive rate.Honeypot,based on proactive defense theory,is a luring technology.Its major function is to lure hacker to attack by simulating the real network and services and collect the data... |
| |
| Keywords: | Network safety IDS Honeypot |
| 本文献已被 CNKI 万方数据 等数据库收录！ |
|
