自适应蜜罐设计与部署综述

OVERVIEW OF SELF-ADAPTIVE HONEYPOT DESIGN AND DEPLOYMENT

  • 摘要: 作为欺骗防御的代表技术,蜜罐虽然能显著改变防御方被动态势,但是随着攻击方技术的发展,目前的蜜罐由于其配置的预先设置、部署的固定性等问题,容易被攻击方识别后绕过,丧失防御能力。因此研究蜜罐设计与部署的适应性增强问题愈发重要。从目前使用最广的两种适应性增强方法— 博弈论和强化学习出发,总结其在自适应蜜罐设计与部署两个方面的应用,并对目前研究的优缺点进行对比分析,最后该文展望两种方法在蜜罐适应性增强方面的改进方向。

     

    Abstract: As a representative technology of deception defense, honeypot can significantly change the dynamic potential of the defender, but with the development of the attacker’s technology, the current honeypot is easy to be bypassed by the attacker after being identified due to its preset configuration and fixed deployment. Therefore, it is more and more important to study the adaptability enhancement of honeypot design and deployment. Starting from the two most widely used adaptive enhancement methods-game theory and reinforcement learning, this paper summarizes their applications in the design and deployment of adaptive honeypots, compares and analyzes the advantages and disadvantages of the current research, and finally briefly looks forward to the improvement direction of the two methods in the enhancement of honeypot adaptability.

     

/

返回文章
返回