基于服务计算的拟态式蜜罐研究

发布时间：2018-02-09 14:50

本文关键词： 拟态式蜜罐服务计算感知演化服务部署与管理　出处：《中国石油大学(华东)》2014年硕士论文　论文类型：学位论文

【摘要】：随着计算机网络的飞速发展,病毒、蠕虫、木马以及黑客的恶意渗透等攻击手段给人们的正常网络应用带了安全威胁。面对不断出现的恶意程序变种,传统的安全防御手段如防火墙、入侵检测系统等变得十分被动。蜜罐作为一种主动式的防御技术较被动式防御更具诱骗性,但传统蜜罐存在“即破即失效”的缺点。受自然界生物种群斗争中拟态现象的启发,课题组在前期工作中提出了拟态式蜜罐的概念,将保护色、警戒色和演化等机制引入到传统蜜罐中,增强了蜜罐的迷惑性,使拟态式蜜罐具有更好的防御性能。本文在前期工作基础上对拟态式蜜罐进行了深入研究,首先构建了基于服务计算平台的拟态式蜜罐模型并进行了形式化描述,详细探讨了拟态式蜜罐模型中的感知策略和拟态演化等机制。随后,针对传统蜜罐的部署问题,提出了“服务部署即服务”的概念并构建了基于服务计算的动态服务部署与管理模型,形式化定义了“服务部署即服务”的功能分工,对动态服务部署与管理模型中的各个功能单元进行了详细描述。将蜜罐作为一种服务进行动态迁移部署,较好地解决了蜜罐的部署问题。最后,在Linux Qt开发环境下设计实现了基于Web服务的动态服务部署与管理原型系统和拟态式蜜罐原型系统,并分别进行了动态服务部署与管理原型系统的运行效率测试实验和拟态式蜜罐的诱骗性能验证实验,证明了基于服务计算的拟态式蜜罐系统的可行性和有效性。
[Abstract]:With the rapid development of computer network, viruses, worms, Trojan horses and hackers' malicious infiltration have brought security threats to people's normal network applications. Traditional security defense methods such as firewall, intrusion detection system and so on become very passive. Honeypot as a kind of active defense technology is more deceptive than passive defense. However, the traditional honeypot has the disadvantage of "breaking or failing". Inspired by the mimicry phenomenon in the struggle of biological population in nature, our group put forward the concept of pseudo honeypot in the earlier work, which will protect the color. The mechanism of warning color and evolution is introduced into the traditional honeypot, which enhances the bewilderment of honeypot and makes the mimic honeypot have better defense performance. In this paper, the mimic honeypot is deeply studied on the basis of previous work. Firstly, the pseudo honeypot model based on service computing platform is constructed and formalized, and the mechanism of perception strategy and pseudo evolution in the pseudo honeypot model is discussed in detail. Then, the deployment of traditional honeypot is discussed. This paper puts forward the concept of "service deployment as a service", constructs a dynamic service deployment and management model based on service computing, and formalizes the function division of "service deployment as service". Each function unit in the dynamic service deployment and management model is described in detail. Taking honeypot as a kind of service to dynamically migrate and deploy, the problem of honeypot deployment is well solved. Finally, The prototype system of dynamic service deployment and management based on Web services and the pseudo honeypot prototype system are designed and implemented in Linux QT development environment. The efficiency test of dynamic service deployment and management prototype system and the experiment of decoy performance verification of simulated honeypot are carried out respectively, which proves the feasibility and effectiveness of the pseudo honeypot system based on service computing.
【学位授予单位】：中国石油大学(华东)
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TP393.09

【相似文献】