为了防止黑客对内部网络的破坏,利用Honeyd构建一个具有迷惑性的蜜罐网络,包括虚拟出多入口路由的网络拓扑结构、网络延迟及网络丢包等网络特性,来干扰黑客攻击和收集攻击信息.构建的多入口路由的蜜罐网络对外界形成了两个入口,并可进入不同网络拓扑结构中,这种蜜罐网络不仅提供了二次防御能力,而且可以更有效地延长入侵时间,进而获得更全面的攻击信息.
In order to prevent damage to the internal network, a honeypot network is built for confusion jamming by Honeyd. It includes network topology of multi-routing, and network features of latency and packet loss, etc. The honeypot network can interfere with the hackers and collect attack information. A virtual honeypot network has two entrances to the external world. The two entrances will lead to their different network of different topology. The honeypot network provides the double defense defensive ability, and can extend intrusion time effectively. And then more attack information will be got.