根据国内外客户端蜜罐系统的发展现状以及恶意网页攻击机理,设计了一个基于高交互客户端蜜罐技术的协同Agent工作模型,并实现了Malicious Web Site Hunter(MWSH)恶意网页检测系统。系统主要包括控制子系统、高交互级蜜罐子系统及服务子系统三个部分。系统利用Agent技术的协作性以及客户端蜜罐技术的准确性来发现网络中的恶意网页。利用基于VSK逻辑的Agent形式化描述语言对系统涉及的Agent进行了形式化描述,并做了具体实现,不仅可以描述Agent和它的环境信息特征,而且可以描述其完整状态变化过程。
According to research of client honey-pot system and mechanism of the malicious web sites attacks,a highly interactive client honey-pot system called Malicious Web Site Hunter was designed and implemented based on Agent working model.The system is composed of control sub-system,high-interaction client honey pot sub-system and service sub-system.It is a malicious websites detecting with intelligence,which make full use of Agent's cooperation and honey pot's accuracy.The formal description of Agent of the system is implemented based on Agent VSK Logic formal description language,which not only to describe the Agent and its characteristics of environmental information,but also can describe the complete state of change process.