论文部分内容阅读
从提升网络安全性的目的出发,设计实现了一个Cisco路由器蜜罐CHoney,用于检测针对Cisco路由器的攻击.CHoney使用函数监控和数据追踪等方法来收集攻击者的信息,并根据攻击者不同的敏感操作分别设定报警规则.经过实验测试发现,CHoney可以及时捕获针对Cisco路由器的攻击,并支持对攻击过程的分析和攻击代码的提取.实验结果表明,CHoney对于Cisco路由器的攻击检测是有效的,可以有效的提升网络的安全性.
For the purpose of improving network security, we designed and implemented CHoney, a Cisco router, to detect attacks against Cisco routers.CHoney uses methods such as function monitoring and data tracing to collect information about attackers, and based on different attackers’ Sensitive operations are set alarm rules.After the experimental test found that CHoney can capture the attack on Cisco routers in time and support the attack process analysis and attack code extraction.The experimental results show that CHoney is effective for Cisco router attack detection , Can effectively improve the security of the network.