传统蜜罐有着不少的优点,比如收集数据的保真度,不依赖于任何复杂的检测技术等。然而随着应用的广泛,传统蜜罐的缺点也开始显现了出来。取而代之的是由一组高交互用来获取广泛威胁信息的蜜罐组成的蜜网。本文针对蜜网中蜜罐所面临的挑战:捕获工具隐藏、加密会话数据的捕获、数据传输隐蔽通道,给出了详细的解决方案。 Traditional honey pot has many advantages, such as the fidelity of data collection, does not depend on any complex detection technology. However, with the wide range of applications, the shortcomings of the traditional honey pot began to emerge. Instead, it consists of a web of honeypots that are highly interactive and used to obtain a wide range of threats. In this paper, the challenges faced by honeypots in honeypots are: capturing tools, capturing captured session data, concealing channels of data transmission, and providing detailed solutions.