基于Linux平臺(tái)的蜜罐識(shí)別系統(tǒng)的研究與實(shí)現(xiàn).pdf

1、密級(jí)：保密期限：姥棠印童天肇碩士研究生學(xué)位論文題目：基王Li壁旦蘭壬臺(tái)鮑窒鱧遲型丕筮鮑班窒生塞理學(xué)號(hào)：Q35242姓名：遴童專(zhuān)業(yè)：鹽箋扭座旦撞苤導(dǎo)師：鹽越學(xué)院：通籃圓釜綻金墊盔受塞逝2006年3月12日北京郵電大學(xué)碩士學(xué)位論文RESEARCHANDIMPLeMENTATIONOFLINUXBASEDANTI—HONEYPOTSYSTEMAbstractHoneypotisacompletelynewnetworksecuritytech

2、nologythatisemerginginrecentyearsbasedOiltheideasofcheatinginthewarItisaresourcewhichisintendedtObeattackedendcompromisedtogainmoreinformationabouttheattackerandhisattacktechniquesTheemergingandboomingofHone)pottechnolod

3、yalsotriggersthedevelopmentofanothercompletelynewstudyarea：theAnti—Hone)potTcchnologywhichisfocusingonthemethodsusedtoidentifyHone)potsThispaperdiscussesabouttheAnti—HoneypottechnologyAfterthedeeps伽dyofLinuxoperatingsyst

4、em，Hone)pottechnolodyandcurrentAntiHoneypottechnologywecomeupwithan圳一Hone)potprincipleandimplementationapproachfromsystemkernelleveltOdetecthi曲involvementHone)potAndweintroducedthefirsttime0111“LinuxbasedAntiHone)potsolu

5、tionwi也combinationofmultipledetectiontechniquesLoadablekernelmoduleisoneofkeyAntiHone)pottechnologiesItenablesAntiHone)potsystemteachtheCOreofthetargetsystemandidentifytheHoneypotfromkernellevelDetectionsub—systemisthemo

6、stimportantpartofAnti—Hone)potsystemItfirstlyidentifiestheHone)potfromsystemcallfunctions，systemflies，systemprocesses，systemmodulesandsystemoutboundinterfaces，andthenanalyzestherecognitionresultsofeachmodulesAsaresult，it

7、makestheoverallevaluationandjudgmentofthetargetHone)potandgreatlyimprovedtheaccuracyoftherecognitionofHone)pot。ThisarticleelaborateshowtoimplementtheAntiHone)potsystemonthebasisofdiscussingabouttheconcept，theclassificati

8、onandcurrentresearchsituationofHoneypotandAntiHone)pottechnologyAttheendofthearticleitintroducesthedetailsofthefunctionalmodulesidentifyingprocedures，detectionsubsystemdesign，implementationandtestoftheLinuxbasedAnti—Hone